kelly-ppt-factory
Warn
Audited by Snyk on Aug 25, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Busabase runtime path
app/app/js/providers/busabase-provider.js:getState()callsreadAllRecords()to ingest full outsider-authored free-text fields (e.g.,review-summary,review-draft-note,content-*,asset-brief,style-*,qaChecks.evidence) from user-writable Bases intobuildSnapshot()at every load.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata