skills/microsoft/github-copilot-for-azure/investigate-integration-test/Snyk

investigate-integration-test

Warn

Audited by Snyk on Apr 17, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to read a GitHub issue and download/analyze logs and artifacts from the linked run in microsoft/GitHub-Copilot-for-Azure, which are public/user-generated third-party contents that the agent must interpret and that can materially influence debugging actions and suggestions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 17, 2026, 12:51 AM

Issues

1

Security Audit — snyk — investigate-integration-test