expanso-dead-letter-queue

Warn

Audited by Snyk on Jul 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). The runtime workflow defined in pipeline.yaml ingests Kafka message bodies (outsider-authored free-form content from producers on INPUT_TOPIC:events) and the pipeline’s mapping/catch processors enrich and output the resulting error metadata derived from those messages into the processing context, which can then be used by downstream LLM steps.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 26, 2026, 05:44 AM
Issues
1
Security Audit — snyk — expanso-dead-letter-queue