ddmemo
Warn
Audited by Snyk on Jun 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). The workflow’s runtime prompt for the
memo-analystagent explicitly inlines the contents of~/CybosVault/private/deals/<company>/research/*.md(“Company research available: [Include all research report content]”); if those research reports include outsider-authored free text (e.g., scraped/public sources or third-party notes) then that text is fed into the LLM context via the agent prompt.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata