stakeholder-update

Warn

Audited by Snyk on Jun 14, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). The workflow’s “Pull Context from Connected Tools” step can ingest outsider-authored free text at runtime from connected sources like public chat messages, meeting transcription notes, knowledge base pages, or project tracker items created by others, which the agent then uses to generate the update in its LLM context.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 14, 2026, 08:53 AM
Issues
1
Security Audit — snyk — stakeholder-update