stakeholder-update
Warn
Audited by Snyk on Jun 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). The workflow’s “Pull Context from Connected Tools” step can ingest outsider-authored free text at runtime from connected sources like public chat messages, meeting transcription notes, knowledge base pages, or project tracker items created by others, which the agent then uses to generate the update in its LLM context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata