reissverschluss-merge
Warn
Audited by Snyk on Nov 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The escalation path's required rebuild step tells the agent to distill intent from the PR description, which is GitHub PR text that external contributors can author, while the rest of the workflow only reads local branches and commits.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata