testrail
Warn
Audited by Snyk on Apr 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly calls the testrail_get_cases MCP tool to fetch user-authored TestRail test cases and then "Read title, preconditions, steps, expected results" and map them into Playwright tests (see "Import Test Cases → Generate Playwright Tests"), so untrusted third-party case content is ingested and can directly influence generated code and subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata