megatron-commit-tracker
Warn
Audited by Snyk on Sep 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow reads commits, PR metadata, and commit messages from GitHub via Git fetch operations, which constitutes reading external contributions (PRs and commits) from an untrusted source.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata