rhdh-jira-sprint-plan

Warn

Audited by Snyk on Aug 13, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). In workflows/plan-sprint.md, the required runtime workflow performs Jira acli jira board list-sprints and multiple acli jira workitem search calls (carryover/velocity/queues) using TEAM_ID and SPRINT_ID, which causes the LLM to ingest outsider-authored free text from Jira issue summaries/fields without first selecting a specific item.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 13, 2026, 03:30 PM
Issues
1
Security Audit — snyk — rhdh-jira-sprint-plan