to-tickets
Warn
Audited by Snyk on Aug 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The required runtime workflow “To Tickets” only reads from existing conversation context and, optionally, explicitly fetched references (spec/issue number/URL) provided by the user argument; this is not a queue/feed/chat/inbox monitor and requires actively selecting a specific external item to fetch.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata