rudder-import-and-evolve
Warn
Audited by Snyk on Jun 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). The required runtime path
rudder-cli import workspacepulls existing RudderStack workspace resources (events/properties/etc.) and ingests their YAML/text into the agent’s LLM context; since those resource contents are authored/edited by others in the workspace (outsider-origin), this is an indirect prompt-injection exposure via imported free-form fields like descriptions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata