databricks-spark-declarative-pipelines
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required runtime workflow is a Databricks SDP pipeline creator/runner (e.g.,
create_or_update_pipeline/run_pipeline) that ingests data from user-configured sources like Auto Loader (read_files/cloudFiles) and streaming feeds (Kafka/Event Hub/Kinesis), where attacker-authored content can enter those sources and be read/processed at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata