skills/woocommerce/wccom-feature-requests-triage-skills/triage-woo-feature-requests/Snyk

triage-woo-feature-requests

Warn

Audited by Snyk on Jul 24, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). The required workflow fetches outsider-authored WooCommerce feature request body text via a runtime MCP tool (mcp__wccom-feature-requests-prod__wccom-feature-requests-list) into a subagent, and then the orchestrator reads/prints flagged excerpts back into its LLM context for display/action.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 24, 2026, 03:47 AM

Issues

1

Security Audit — snyk — triage-woo-feature-requests