structural-index

Warn

Audited by Snyk on Jul 9, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). High: the required runtime workflow runs shell generators that read outsider-authored Drupal project files (e.g., *.services.yml, *.routing.yml, *.module, *.php, *.permissions.yml, and config *.yml) and write their extracted prose/text into generated markdown/JSON under docs/semantic/structural/, which is then used as LLM context (e.g., via the “prime.sh: FEATURE_MAP.md loaded as primary context when available” and discover/query over the generated structural data).

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 9, 2026, 08:31 AM
Issues
1