claude-code-analyzer
Warn
Audited by Snyk on Oct 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow includes a script (
scripts/github-discovery.sh) that queries GitHub for code/files (.claude/agents,.claude/skills, etc.) using theghCLI or search URLs, ingesting arbitrary outsider-authored repository content into the agent's runtime context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata