ci-test-failures
Warn
Audited by Snyk on May 5, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill explicitly downloads and parses job logs and artifacts from GitHub Actions run URLs (see SKILL.md steps using DownloadFailingJobLogs.cs, gh api, and CreateFailingTestIssue with --url "https://github.com/.../actions/runs/") and uses the extracted .trx/log content to choose tests and create/update issues, so untrusted user-generated content from those artifacts could influence tool decisions and actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata