hr-sidebar-summarization
Warn
Audited by Snyk on Jun 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested from the case’s journal entries (
sys_journal_field.valuefromwork_notes/commentsforelement_id=[case_sys_id]) viaSN-Query-Table/SN-Execute-Background-Script, wheresys_created_bymay be non-operating users and their note/comment text is then emitted into the LLM context for summarization.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata