demo-guide
Warn
Audited by Snyk on Aug 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). In
demo-guide, outsider free-text only enters through the user’sfeature-or-scope/ prompt or confirmation step, which the workflow then uses to select/confirm project artifacts and proceeds to read trusted repository files for evidence rather than ingesting outsider-authored content from a monitored feed/queue.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata