daily-report
Warn
Audited by Snyk on Apr 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). Section 0 (P0/P1 Verification Protocol) explicitly instructs extracting a https production URL from GitHub issue bodies (user-generated content) and running curl against that public URL to decide whether to mark/close/escalate incidents, so the agent fetches and acts on untrusted third-party web content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata