integration-testing

Warn

Audited by Snyk on May 20, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's setup guidance explicitly requires the agent to "Search the official elastic/integrations github repository for 2–3 packages" and "Examine each one's" deploy/test files (references/builder-setup-subagent-guidance.md), meaning the agent must fetch and interpret public, user-maintained GitHub content which can materially influence test/service wiring and actions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 20, 2026, 08:43 PM
Issues
1
Security Audit — snyk — integration-testing