backlog-md

Warn

Audited by Snyk on Jun 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The required runtime step “Read the task with backlog task <id> --plain” ingests task content authored by other contributors (outsider-authored backlog tasks) into the agent’s LLM context via the CLI’s --plain output.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 15, 2026, 02:28 AM
Issues
1
Security Audit — snyk — backlog-md