structural-index
Warn
Audited by Snyk on Jul 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). High: the required runtime workflow runs shell generators that read outsider-authored Drupal project files (e.g.,
*.services.yml,*.routing.yml,*.module,*.php,*.permissions.yml, and config*.yml) and write their extracted prose/text into generated markdown/JSON underdocs/semantic/structural/, which is then used as LLM context (e.g., via the “prime.sh: FEATURE_MAP.md loaded as primary context when available” and discover/query over the generated structural data).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata