map-user-stories
Warn
Audited by Snyk on May 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The SKILL.md Step 1 workflow explicitly accepts arbitrary URLs ("URL → WebFetch で取得") and ingests that web content to extract user stories and build plans (feeding into task decomposition and create-jira-issues), so untrusted third‑party pages could influence subsequent tool actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata