skills/ulpi-io/autonomous-engineering/checkpoint-resume/Snyk

checkpoint-resume

Warn

Audited by Snyk on Aug 11, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In scripts/lib/workflow-journal.mjs, the runtime reads Claude Code’s external workflow journal.jsonl (started/result JSONL envelopes) for a “Live workflow” overlay in scripts/run-status.mjs via readWorkflowStatus(), which ingests outsider-authored free text from that journal.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 11, 2026, 06:20 PM

Issues

1

Security Audit — snyk — checkpoint-resume