task-decomposer
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill integrates with the public Linear API (see linear_integration.py and LINEAR_API_URL in scripts/constants.py) and issues/queries such as get_issue, get_users and search_users ingest user-generated issue titles/descriptions and user data from a third‑party service that the agent may read or act on.
Audit Metadata