wayfinder
Warn
Audited by Snyk on Aug 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow reads outsider-authored free text from a repository’s issue tracker: it loads the map and then fetches full bodies of open/related/closed child issues (including user-written issue/ticket content) via the “Load the map” and “Zoom as needed: fetch the full body of any related or closed ticket” steps.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata