detect-stale
Warn
Audited by Snyk on Jul 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required workflow fetches outsider-authored free text by reading feature request records’
titleand especiallydescription(“Fetch all open feature requests… Collect … description”) from an external system viawccom-feature-requests-list, then includes thatdescriptioncontent in LLM-visible prompts (e.g., Step 4 “trimmed … description” and Step 5 “Show full group details … [description — first 2–3 sentences]”).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata