neo-pr

Warn

Audited by Snyk on Jul 26, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (medium risk: 0.65). The required runtime workflow uses git-pr-extractor.py to read git log and git diff output from the checked repository (i.e., commit messages/diff text written by other contributors), which becomes LLM-readable text via the script’s stdout (diff_snippet/commits).

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 26, 2026, 06:22 AM
Issues
1
Security Audit — snyk — neo-pr