infographics
Warn
Audited by Snyk on Jun 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). PR Mode fetches PR body text from GitHub (
gh pr view <number> --json body ...), which is outsider-authored free text from other contributors, and then passes it into the image-generation script via--pr-body-file(LLM-readable prompt content path).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata