skills/codacy/codacy-skills/codacy-code-review/Snyk

codacy-code-review

Warn

Audited by Snyk on Apr 1, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.80). The skill's required Step 1 explicitly instructs fetching pull request metadata from external source providers (GitHub/GitLab/Bitbucket) and linked ticket content (Jira/GitHub Issues/Linear), which are user-generated/untrusted and are read and used to guide review decisions, so third‑party content can influence the agent's actions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 1, 2026, 03:15 PM

Issues

1

Security Audit — snyk — codacy-code-review