fsm-kb-generation

Warn

Audited by Snyk on Aug 3, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). In Step 3 and Step 2/6/8, the runtime queries and ingests technician free-text from ServiceNow work order fields (wm_task.close_notes/description and sys_journal_field element=work_notes, plus close_notes from similar work orders) and then LLMs that content into the generated KB article text.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 3, 2026, 02:23 PM
Issues
1
Security Audit — snyk — fsm-kb-generation