generate-gh-issue
Warn
Audited by Snyk on Mar 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and interprets user-generated GitHub issue content via the
ghCLI (e.g., "gh issue list --limit 10..." in Step 2 and the multi-strategygh issue listsearches in Step 6), using those titles and issue data to choose language, detect duplicates, and decide whether to create or comment on issues, so untrusted issue text could materially influence agent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata