issue
Warn
Audited by Snyk on Apr 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill explicitly fetches and displays user-generated content from third-party trackers (GitHub via
gh issue list --json ...and Linear viamcp__claude_ai_Linear__list_issues) as a required part of the "List Issues" workflow, so untrusted issue titles/bodies are read and summarized and could influence agent output or subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata