prepare-change
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md phase 4 “Resolve tickets” reads tracker item titles/bodies/comments via the configured backend operations described in docs/agents/issue-tracker.md (tickets.md lines 26-32, 68-70, 104-106), and that tracker text can be authored by outsiders, so the required workflow can ingest untrusted free text from a monitored issue/ticket system at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata