orcawave-orcaflex-readiness-audit
Warn
Audited by Snyk on Jul 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to query and reconcile outsider-authored GitHub issue bodies (via
gh issue viewfrom the workspace-hub repo), which are free-form text written by others and would be ingested into the LLM context at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata