odyssey-review-test-fix

Warn

Audited by Snyk on Jul 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). The workflow ingests outsider-authored free text from public/local repository content at runtime—e.g., git log/git blame output in A_ARCHAEOLOGY and git diff-derived file contents used by the review/generalization agents—where commits/authors and code comments are not authored by the operating user and are read as prose into the LLM context via the delegated agent instructions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 3, 2026, 08:44 AM
Issues
1
Security Audit — snyk — odyssey-review-test-fix