integration-testing
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's setup guidance explicitly requires the agent to "Search the official elastic/integrations github repository for 2–3 packages" and "Examine each one's" deploy/test files (references/builder-setup-subagent-guidance.md), meaning the agent must fetch and interpret public, user-maintained GitHub content which can materially influence test/service wiring and actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata