release-writing
Warn
Audited by Snyk on Oct 29, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required workflow uses GitHub CLI commands (
gh run list,gh pr checks,gh release view,gh release list) to fetch workflow runs, PR checks, and release notes authored or influenced by external contributors, resulting in medium indirect prompt injection risk.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata