user-tag-system-designer
Warn
Audited by Snyk on Aug 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Step 1 “Metadata Acquisition” calls
ae-cli metadata queries(event/property/metric list) and the runtime LLM ingests the returned event/property names/descriptions from that trusted-but-user-controlled project metadata source without requiring selecting a specific outsider-authored item first.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata