rhdh-jira-update

Warn

Audited by Snyk on Aug 19, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The skill reads Jira issue state and content via acli in workflows/update-issue.md (Step 2: acli jira workitem view ... --json and Step 3: composing/posting comments), and those issue contents can include outsider-authored free text (e.g., existing issue comments/descriptions) whenever the workflow is invoked on an issue key.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 19, 2026, 11:10 AM
Issues
1
Security Audit — snyk — rhdh-jira-update