irs-evidence-research
Warn
Audited by Snyk on Oct 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow instructs the agent to research tax rules by searching official government websites (IRS, US Code, eCFR) and loading references, which involves browsing and fetching external web content rather than monitoring an attacker-controlled submission queue.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata