skills/dpolivaev/spec-loop/spec-loop-review-change/Snyk

spec-loop-review-change

Warn

Audited by Snyk on Aug 30, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The workflow monitors and consumes outsider-authored free text via GitHub pull request metadata, descriptions, discussion comments, and commit messages (via github-gitlab-evidence-guidance.md and review-core-guidance.md).

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 30, 2026, 05:26 PM

Issues

1

Security Audit — snyk — spec-loop-review-change