melech-code-review-clone

Warn

Audited by Snyk on Sep 12, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.30). The required workflow reads GitHub pull requests, issues, comments, and reviews via the collect-review-activity.py script and the generated automation prompt, allowing outsiders to submit untrusted free text into the repository data consumed by the agent.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 12, 2026, 04:02 PM
Issues
1