gitnexus-work
Warn
Audited by Snyk on Jul 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). source: SKILL.md; runtime path: /gitnexus-work performs Phase 1 by calling scripts/evidence-provenance.mjs read-plan and then directly consumes the plan’s implementation_context pack (including prose-based rationale) from the receipt bytes to drive Phase 3 edits.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata