interview-synthesis
Warn
Audited by Snyk on Jul 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). The required runtime workflow ingests the user-provided
interviews.json(outsider-authored customer Q/A transcripts) and renders their free-text answers into the LLM context/output viascripts/interview_synthesizer.py(e.g.,extract_snippets()→render_markdown()includess['text']), creating an indirect prompt-injection risk if those transcripts contain adversarial text.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata