skills/lbk-open/super-spec/ss-feature-workflow/Snyk

ss-feature-workflow

Warn

Audited by Snyk on Aug 26, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The skill ss-feature-workflow ingests “Requirement source” at runtime (PRD/requirement link, pasted text, or local file) and then passes that free-form requirement into downstream skills (ss-proposal/ss-plan/ss-coding) without any requirement that the text be first-party/trusted.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 26, 2026, 05:56 PM

Issues

1

Security Audit — snyk — ss-feature-workflow