nirc-badge-request
Warn
Audited by Snyk on Aug 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In Step 3/“Offer the paste option explicitly” and Step 5, the workflow collects free-text fields from the user (including possibly old receipt email content for renewals) and then uses that LLM-ingested text to prefill the live Google Form.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata