release-flow

Warn

Audited by Snyk on Aug 24, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). The required workflow in this skill is a tag-triggered GitHub Actions release flow that builds artifacts and later uses gh release view/gh release edit to read/write GitHub Release content; it does not ingest outsider-authored free text from a user-queue/chat/inbox or arbitrary external pages without first selecting specific trusted release items.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 24, 2026, 09:30 AM
Issues
1
Security Audit — snyk — release-flow