rhdh-forge
Warn
Audited by Snyk on Aug 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md→Outcome “Turn a GitHub issue reference into structured context” runs
scripts/fetch_issue_context.py, which at runtime fetches outsider-authored issue content (title/body/labels/comments) from a referenced GitHub issue URL/number viagh issue viewand then ingests that free text into its workspace resolution logic.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata