pr-fix-loop
Warn
Audited by Snyk on Jun 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required runtime workflow ingests OUTSIDER-authored free text from GitHub PR content—specifically bot/human review bodies and issue comments (e.g.,
claude,chatgpt-codex-connector) and inline review thread comment bodies—viagh api graphqlqueries in steps 1 and 6, which then get parsed and placed into the agent’s LLM context for triage/fixing.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata