session-spinup

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). In SKILL.md the runtime path runs scripts/session-survey.sh (and optionally GitHub MCP via mcp__github__list_issues / mcp__github__list_pull_requests) to read outsider-authored issue/PR text and the skill then surfaces/filters that digest in the briefing.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 18, 2026, 03:59 AM
Issues
1
Security Audit — snyk — session-spinup