lisa-jira-sync
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Runtime workflow in SKILL.md reads outsider-submitted free text by parsing ticket IDs and then fetching ticket comments/remote links and searching issues via
lisa-atlassian-access(Step 1.2 and Step 3.1), where comment bodies are authored by Jira users.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata