lockpick
Warn
Audited by Snyk on Oct 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow reads security assessment reports and scan results from the Lockpick web app containing data extracted from scanned public websites (page text, headers, scripts, comments, and DNS records), which are explicitly noted as untrusted content under guardrails.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata