skills/derogab/agent-kit/reply/Snyk

reply

Warn

Audited by Snyk on May 4, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches and reads GitHub pull request review threads and comments via the gh API/GraphQL queries (reviewThreads and comments.body) and uses those user-generated, potentially untrusted comments to decide whether and how to post replies, so third-party content can influence agent actions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

May 4, 2026, 03:58 PM

Issues

1