skills/53able/skills/pr-evidence-capture/Snyk

pr-evidence-capture

Warn

Audited by Snyk on Jul 12, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). Step 1 uses gh pr view and gh pr diff to fetch PR title/body/diff from GitHub, which is outsider-authored free text (PR author) and is then used to construct the LLM prompt/context for the agent’s workflow.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 12, 2026, 09:12 AM

Issues

1

Security Audit — snyk — pr-evidence-capture