workplace-pro
Warn
Audited by Snyk on Aug 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The “Daily Meeting Update” workflow reads and parses locally stored Claude Code session JSONL text from user-controlled files under the .claude/projects directory (including user message content) via scripts/daily-meeting-update/claude_digest.py:parse_session_file().
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata