gh-notifications
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). At runtime the workflow calls the GitHub API for unread notifications and then fetches additional content like
subject.latest_comment_urland issue comments/timeline (gh api {latest_comment_url},gh api repos/{owner}/{repo}/issues/{n}/comments,.../timeline), which includes free-form comment/body text authored by other GitHub users (outsider) that is ingested into the agent’s LLM context for ranking/quoting.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata