debug-pipeline
Warn
Audited by Snyk on Oct 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow reads build pipeline logs, step outputs, and execution details from Harness via MCP tools, which can contain untrusted output from external build steps or external test runner text.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata