skills/tribou/dotfiles/issue-to-implementation/Snyk

issue-to-implementation

Warn

Audited by Snyk on Jul 2, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). The required workflow ingests the finalized GitHub issue body (outsider-authored text) via gh issue view <N> --json ...body and then passes it into superpowers:writing-plans for plan generation, which becomes LLM context—an indirect prompt-injection risk.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 2, 2026, 03:42 AM

Issues

1