backlog-manager
Warn
Audited by Snyk on Jul 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.95). SKILL.md Step 4 (“Classify Open Issues”) requires fetching GitHub issue/PR titles, bodies, comments, and linked PR data, which are outsider-authored free text, and then using that text for LLM classification/rationale.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata