github-workflow
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The runtime path “Task Retrieval” can ingest outsider-authored free text when the user provides an external task URL/text (e.g., ClickUp/Jira link/comment) to fetch task details and comments via
commands.get/commands.comments, making that text available to the LLM for subsequent PR creation.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata