stix2-generator
Warn
Audited by Snyk on Aug 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The runtime workflow only reads provider-user supplied local input files/JSON passed as command-line arguments (e.g.,
--iocs FILE,--threat FILE,--batch FILE) and generates STIX from that text, rather than ingesting outsider-authored free text from a shared external feed.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata