skills/nvidia/nemo-fabric/check-release-deployments/Snyk

check-release-deployments

Warn

Audited by Snyk on Oct 3, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The workflow reads package registry data, PyPI version lists, and GitHub Actions workflow run names via API queries, which can include untrusted community-contributed or PR-linked workflow names/metadata.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 3, 2026, 05:20 PM

Issues

1