sourcecoop
Warn
Audited by Snyk on Aug 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Source Cooperative upload workflow: it prompts the user for free-text fields (e.g., organization slug/product title/metadata like description/license/contact) and then runs Portolan steps that consume those locally generated strings to validate and generate README/metadata before pushing to S3.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata