dnanexus-integration
Warn
Audited by Snyk on Aug 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). DNAnexus job execution workflow can ingest free text from outsider-controlled job log lines at runtime via
dxpy.api.job_get_log(...)->log["loglines"], enabling indirect prompt injection if job inputs/outputs/log content include attacker-authored strings.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata