tailscale-policy-manager
Warn
Audited by Snyk on Mar 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflows and scripts (see references/api-reference.md and references/gitops-setup.md) explicitly fetch policy.hujson from the Tailscale API and from GitHub repositories (user-managed/PR content) and then validate and apply those files, so untrusted, user-provided third-party content is read and can directly drive actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata