ln-404-test-executor
Warn
Audited by Snyk on May 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly loads the full test task via the configured tracker provider (
getTask/getStory) and the provider bindings include GitHub Issues and Linear (references/provider_github.md and references/provider_linear.md), meaning it ingests user-generated issue bodies/comments and linked runbook/guide content and then uses those instructions (e.g., commands from runbook) to decide and execute test-run actions, so untrusted third-party content can materially influence behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata