specrail-triage-issue
Warn
Audited by Snyk on Jul 22, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). This workflow’s required runtime path appears to run local scripts (
checks/github_issue_evidence.pyandchecks/route_gate.py) on a user-supplied--issue <issue-number>/--github-repoinput, which can ingest outsider-authored GitHub issue text as “evidence” into the LLM context indirectly via generated JSON—so this is an indirect prompt-injection exposure via public/third-party issue body text.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata