scaffold-docs
Warn
Audited by Snyk on Sep 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The skill documentation mentions connecting the Linear MCP server and fetching issues by ID when present in branch names or PR titles, but does not implement an automated workflow that continuously reads outsider-submitted issue text without selection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata