qa-write-test-cases

Warn

Audited by Snyk on Jul 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.85). SKILL.md’s required Step 1 (“Gather context”) explicitly ingests outsider-authored free text from task tracking systems (e.g., Jira issues), requirements docs (e.g., Confluence), design mockups, existing test cases, and source code files at runtime, which the agent then uses to generate checklist/test cases in the LLM context.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 10, 2026, 06:37 PM
Issues
1
Security Audit — snyk — qa-write-test-cases