skills/coderabbitai/skills/code-review/Snyk

code-review

Warn

Audited by Snyk on May 4, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.80). The skill sends code diffs to the third-party CodeRabbit API and instructs the agent to consume and act on the review output (see SKILL.md "Run Review" and "Data transmitted"), so external, untrusted review content can directly influence agent decisions and follow-up actions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

May 4, 2026, 07:05 AM

Issues

1