knowledge-distill

Warn

Audited by Snyk on Jul 25, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.75). Outsider-authored free text is ingested via existing wiki pages under <WIKI_ROOT>/wiki/sources/<slug>.md (and wiki/questions/<slug>.md), whose pre_extracted_claims: / sources_answering: are read at Step 1 and Step 6.9 bundle-building and then fed into dispatched agents (LLM context) as evidence.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 25, 2026, 01:51 PM
Issues
1
Security Audit — snyk — knowledge-distill