nest-boot-maintainer

Warn

Audited by Snyk on Aug 27, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). 运行时仅用于处理用户在提示词中提交的“@nest-boot/* 问题描述/复现证据/改进需求”等自由文本,并在流程中会据此生成 Issue/PR 文案;该工作流并未从第三方公开源自动读取外部文本后再让 LLM 消费(但会直接消费用户输入)。

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 27, 2026, 04:42 AM
Issues
1
Security Audit — snyk — nest-boot-maintainer