skills/openai/codex-security/triage-finding/Snyk

triage-finding

Warn

Audited by Snyk on Jul 29, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). Skill “Triage Finding” can ingest outsider-authored free text at runtime when importing Jira/Linear ticket bodies (connector retrieval) and GitHub security alerts/issues (REST-fetched alert/issue titles/bodies/comments are treated as untrusted data), before producing the static triage verdicts.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 29, 2026, 05:31 PM

Issues

1

Security Audit — snyk — triage-finding