skills/bgauryy/octocode/octocode-research/Snyk

octocode-research

Warn

Audited by Snyk on Aug 18, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). Skill runtime paths like External Research/Combination/PR review explicitly call GitHub/npm tools (e.g., ghSearchIssues/ghSearchPullRequests/ghSearchCode/ghGetFileContent, ghCloneRepo) that ingest PR/issues/comment and repository README/source text from outsider-authored content at runtime without requiring a specific pre-selected item.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 18, 2026, 06:52 PM

Issues

1

Security Audit — snyk — octocode-research