issue

Warn

Audited by Snyk on Aug 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). In the issue skill workflow, outsider free text from the user (the “free-text description plus session context”) is used to draft an issue title/body and may be further processed by the optional grilling interview engine (steps 4-6), but the only outsider-posted free text directly ingested at runtime is the human’s own input—not third-party forge/queue text.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 26, 2026, 03:15 PM
Issues
1
Security Audit — snyk — issue