finops-waste
Warn
Audited by Snyk on Apr 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's script (scripts/waste-analysis.sh) and SKILL.md explicitly call the GitHub API (gh api "/repos/$REPO/actions/runs") to ingest GitHub Actions run data—which is user-generated/untrusted content—and the agent parses that data to drive analysis and offer/apply workflow edits, so third-party content can influence its actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata