changelog
Warn
Audited by Snyk on Jul 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). SKILL.md workflow mode 1 runs
git log <boundary> --oneline --no-mergesand then translates the resulting commit messages into user-facing prose, so the LLM context is fed free text authored by other contributors via git commit history.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata