boards-query
Warn
Audited by Snyk on Sep 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow queries Azure DevOps work items and their fields (such as titles and descriptions) via WIQL and saved queries, which can contain user-submitted content from outside the organization (e.g., bug descriptions, work item titles).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata