synapse-migration

Warn

Audited by Snyk on Jul 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). The required workflow performs runtime inventory by calling Synapse/Fabric REST APIs and then extracts notebook cell source text (free-form code) from those responses into the agent’s context for auditing/transforms (outsider-authored content from the Synapse workspace), e.g., Phase 1b scans nb["properties"]["cells"] and joins cell["source"] into source strings.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 10, 2026, 02:45 PM
Issues
1
Security Audit — snyk — synapse-migration