skills/trebuchetdynamics/pi-package-goal/triage/Snyk

triage

Warn

Audited by Snyk on Jun 23, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.95). The skill’s runtime triage workflow explicitly reads the full GitHub issue body and comments (including prior triage notes) via the issue tracker API, which are outsider-authored free text from the reporter/other commenters.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 23, 2026, 04:24 PM

Issues

1

Security Audit — snyk — triage