skills/raptoravis/tunan/sync-ups/Snyk

sync-ups

Warn

Audited by Snyk on Aug 31, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The workflow reads GitHub issues and comments via gh issue to retrieve the sync baseline and clone/read upstream repository files, which can contain outsider-submitted free text.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 31, 2026, 09:09 PM

Issues

1