github-api
Warn
Audited by Snyk on May 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill directly calls the public GitHub API (see SKILL.md API Reference endpoints like "Get File Contents" /github/repos/{owner}/{repo}/contents/{path}, "List Issue Comments" /github/repos/{owner}/{repo}/issues/{issue_number}/comments, and other repo/issue/PR endpoints) which returns untrusted, user-generated content that the agent is expected to read and could materially influence subsequent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata