skills/bjornmelin/dev-skills/repo-modernizer/Snyk

repo-modernizer

Warn

Audited by Snyk on Aug 25, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In the GitHub Dependency Intel Lane, scripts/gh_deps_intel.py fetches outsider-authored GitHub release/changelog/compare text via GitHubClient.get_releases(), GitHubClient.get_changelog(), and GitHubClient.get_compare(), then passes that free text into analyze_dependency_changes() for extraction and into render_report.py for reporting.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 25, 2026, 01:38 PM

Issues

1

Security Audit — snyk — repo-modernizer