engineering-ai-pipelines
Warn
Audited by Snyk on Jul 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill’s runtime RAG flow can ingest outsider-authored free text via retrieved document chunks stored in the vector DB (e.g.,
RAGPipeline.retrieve()→doc['text']→context_text→ LLMmessages), and those documents are not guaranteed to be operating-user-authored.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata