gitnexus-lfg
Warn
Audited by Snyk on Jul 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). gitnexus-lfg itself only reads first-party skill files (its own
SKILL.md) and then invokesgitnexus-plan/gitnexus-work/gitnexus-reviewon user-provided task text and an internaldocs/plans/...plan path, without any required workflow step that ingests outsider-authored free text from an external monitored feed/queue/ticket system.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata