qa-write-test-cases
Warn
Audited by Snyk on Jul 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). SKILL.md’s required Step 1 (“Gather context”) explicitly ingests outsider-authored free text from task tracking systems (e.g., Jira issues), requirements docs (e.g., Confluence), design mockups, existing test cases, and source code files at runtime, which the agent then uses to generate checklist/test cases in the LLM context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata