triage
Warn
Audited by Snyk on Sep 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The triage skill actively reads GitHub issues and external PR bodies, comments, and metadata at runtime, allowing any submitter of an issue or PR to inject untrusted free text directly into the agent's workflow.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata