ln-404-test-executor

Warn

Audited by Snyk on May 11, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly loads the full test task via the configured tracker provider (getTask / getStory) and the provider bindings include GitHub Issues and Linear (references/provider_github.md and references/provider_linear.md), meaning it ingests user-generated issue bodies/comments and linked runbook/guide content and then uses those instructions (e.g., commands from runbook) to decide and execute test-run actions, so untrusted third-party content can materially influence behavior.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 11, 2026, 12:52 PM
Issues
1