golang-observability

Warn

Audited by Snyk on Apr 29, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The skill's workflow explicitly directs the user/agent to browse and copy rules from public, user-maintained sites (e.g., "Check awesome-prometheus-alerts" in references/alerting.md and importing dashboards from grafana.com in references/dashboards.md), which means the agent is expected to ingest and act on untrusted third‑party content that can materially change configuration/behavior.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 29, 2026, 10:00 AM
Issues
1