rhdh-jira-update
Warn
Audited by Snyk on Aug 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The skill reads Jira issue state and content via
acliinworkflows/update-issue.md(Step 2:acli jira workitem view ... --jsonand Step 3: composing/posting comments), and those issue contents can include outsider-authored free text (e.g., existing issue comments/descriptions) whenever the workflow is invoked on an issue key.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata