forgejo
Warn
Audited by Snyk on Jul 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). Outsider-authored free text from Forgejo (issues/PR bodies and wiki page content) is fetched at runtime via the REST API and printed as readable text (e.g.,
scripts/summary.pydecodes wikicontent_base64and prints it;scripts/issue.py/scripts/pr.pyprint issue/PR bodies), which can then be ingested into the agent’s LLM context by the surrounding workflow.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata