git-workflow
Warn
Audited by Snyk on May 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md "PR 工作流" and Monorepo PR Diff checks) instructs the agent to fetch and read GitHub PRs and diffs via gh commands (e.g., "gh pr view", "gh pr diff", "gh pr checks")—public, user-generated content—which the agent must interpret to decide whether to merge or block, creating a clear path for indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata