building-github-index-v2
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The GitHub index workflow ingests outsider-authored free text at runtime by fetching and parsing repository file contents from GitHub via
scripts/github_index.py(get_repo_treeenumerates blob paths, thenfetch_filedownloads each.md/.ipynbfile content and extracts frontmatter/headings, which is then used in the generated index).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata