sbom-analysis
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Source: user-supplied “SBOM file(s)” referenced by the required runtime argument “[target-file-or-directory]”, which the workflow parses and reads (CycloneDX/SPDX plus any provided VEX/CSAF documents) to produce completeness/VEX/license/risk assessments.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata