gitlab-cli-guide
Warn
Audited by Snyk on Jun 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). glab-api (and similarly glab-ci/job/mr/issue view/trace) performs authenticated API calls and prints GitLab user-generated text (e.g., issue/MR bodies, commit messages, job logs) into stdout, which the agent can ingest as LLM-readable context; this is outsider-authored content from GitLab.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata