code-review-gatekeeper
Warn
Audited by Snyk on Apr 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs using AI to "perform a first-pass review" of PRs and to "Configure a GitHub Action that blocks PRs" (see SKILL.md Instructions step 3 and Examples), which requires fetching and interpreting user-generated pull request content from GitHub—untrusted third-party content that can directly influence merge decisions and tool actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata