roadmap
Warn
Audited by Snyk on Jun 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The skill reads and ingests outsider-authored free text from
{vault}/raw/weeks/{YYYY-WNN}/{slug}.json(JSON arrays of entries) into the derived decision index/roadmap context, and those raw entries are not restricted to user-authored content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata