tprm-issue-summarization
Warn
Audited by Snyk on Aug 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). At runtime the workflow queries and summarizes ServiceNow records like
sn_tprm_issue,sn_tprm_vendor_assessment, and related fields (e.g.,description,short_description,remediation_plan) via tools such asSN-Query-Table/SN-Natural-Language-Search, which are free-text entered by third-party service users and thus can include outsider-authored content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata