code-review
Warn
Audited by Snyk on Oct 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The skill workflow involves reading issue tracker references (such as #123) from commit messages, which delegates to an external issue tracker workflow specified in
docs/agents/issue-tracker.mdthat ingests outsider-submitted tickets and issue text.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata