github-project-manager
Warn
Audited by Snyk on Apr 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The workflow explicitly reads and acts on user-generated GitHub content (e.g., CLAUDE.md / AGENTS.md in the repo and issue bodies / project items via commands like
gh issue list,gh api, andgh project item-list), and injects that content into templates and decision-making (duplicates, sub-issue discovery, estimates, triage), so untrusted third-party content can materially influence agent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata