oss-maintainer
Warn
Audited by Snyk on Aug 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a maintainer workflow that explicitly ingests and reads outsider-authored GitHub issues/PRs (“incoming issues, community PRs”, “read the actual code…Verify the reported line numbers…against the current source”, and “gh pr list and search before implementing”), which implies runtime ingestion of free text authored by external users via GitHub issue/PR bodies/metadata.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata