issue-fixer
Warn
Audited by Snyk on Jul 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The workflow uses
gh issue view <number> --json title,body,labels,comments,..., and the LLM would ingest the outsider-authored GitHub issuebody/comments(public/third-party free text) into its context while “summariz[ing] the problem” and planning the fix.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata