macro-builder
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.95). The workflow fetches “last 50-100 tickets” from the Gorgias support system (outsider-authored free text: customer messages/ticket bodies) via
composio execute GORGIAS_LIST_TICKETS, and then the agent analyzes those subjects/messages to generate macros—so customer-written content is ingested into the LLM context at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata