cubrid-loop-pr
Warn
Audited by Snyk on Jul 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.65). Outsider free text can enter the LLM context via Step 9: the skill fetches failing CI logs from CircleCI/GitHub check-runs (
details_url/check-runs), and then passes an extracted “last 80 lines of failing log” aslast_failure_summaryinto the next round’s prompt to/cubrid-grill-and-implement(indirect prompt injection risk from outsider-authored build log text).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata