stats
Warn
Audited by Snyk on Sep 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required workflow fetches open and closed GitHub pull requests, including untrusted PR titles, labels, and comment bodies, and ingests them into the LLM context for classification and aggregation.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata