orchestrate
Warn
Audited by Snyk on Jul 31, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The orchestrator’s required runtime workflow ingests GitHub issue sub-issue metadata via
gh api graphql(“issue(number:$N){ subIssues... nodes{ number title state } }”), where the outsider-authored text is the sub-issue content/comments/issues that a user can post into the issue tracker.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata