analyze-issue
Warn
Audited by Snyk on Apr 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's required workflow explicitly fetches GitHub issue details ("fetch the issue details from GitHub" in step 2) — public, user-generated content that the agent must read and use to create specifications and decide actions, so it can carry indirect prompt-injection content.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata