skills/daymade/claude-code-skills/github-review-pr/Snyk

github-review-pr

Warn

Audited by Snyk on Jul 11, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). The required workflow ingests outsider-authored free text from GitHub PR-controlled fields (e.g., gh pr view ... --json ... body and gh api .../pulls/$PR_NUMBER plus review/comment streams), which are then used in “Reconstruct Intent and Scope” and “Counter-Review Nontrivial Changes” as LLM context.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 11, 2026, 05:06 AM

Issues

1

Security Audit — snyk — github-review-pr