golang-observability
Warn
Audited by Snyk on Mar 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill's required workflow (references/alerting.md and the Best Practices "When adding a new infrastructure dependency" step) explicitly instructs checking and copying rules from the public site https://samber.github.io/awesome-prometheus-alerts/ (and importing community Grafana dashboards from grafana.com), meaning the agent is expected to read and act on untrusted, public third‑party content that can directly influence alerting/dashboard configuration.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata