git-daily-note-updater

Warn

Audited by Snyk on Aug 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 在 SKILL.md 的 Step 2-4 中会对用户配置/参数指定的本地 Git 仓库执行 git loggit log -1 --format="%s%n%b"git show <commit_hash> --format="",从而直接读取并把仓库中由外部作者可能提交的 commit message 与 diff 作为 LLM 输入进行分析。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 19, 2026, 12:13 AM
Issues
1
Security Audit — snyk — git-daily-note-updater