work-on-issues
Warn
Audited by Snyk on Sep 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required workflow fetches and reads GitHub issues including their bodies using
gh issue list, which allows outsiders to submit untrusted free text into the monitored queue.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata