shader-gen
Warn
Audited by Snyk on Aug 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow primarily ingests user-provided intent text (e.g.,
submit_shader.prompt) but does not describe any runtime path that reads outsider-authored free text from third-party feeds/queues (like email, chat/social, GitHub/Jira issues) before selecting a specific item.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata