wpt-update
Warn
Audited by Snyk on Nov 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required triage workflow has the agent read upstream web-platform-tests commit diffs, commits, and associated GitHub pull requests for failing tests, and PR and commit text there is authored by outside contributors and is ingested without the agent first selecting a specific item.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata