plugin-kubernetes
Warn
Audited by Snyk on Jul 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The Kubernetes plugin’s required runtime workflow ingests outsider-provided YAML strings/arrays via
diagram.import(k8sYaml, "kubernetes")/diagram.import([stagingManifest, productionManifest], "kubernetes"), so attacker-authored free text can be parsed at runtime without selecting a specific trusted item first.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata