issue-summarization
Warn
Audited by Snyk on Aug 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow at runtime queries ServiceNow tables (sn_grc_issue, sn_grc_risk, sn_compliance_control, sn_grc_profile) via SN-Query-Table/REST endpoints and then summarizes free-text fields like short_description/description that can be outsider-authored by users of the ServiceNow system, without any prior selection/filtering for “trusted” authorship beyond having record read access.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata