skills/fcakyon/claude-codex-settings/update-pr-summary/Snyk

update-pr-summary

Warn

Audited by Snyk on Apr 10, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.70). This skill explicitly fetches PR title/body via gh pr view (SKILL.md step 1), which reads user-generated GitHub PR content that the agent will interpret when generating and applying an updated PR summary, so untrusted third-party content could influence its outputs.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 10, 2026, 07:55 AM

Issues

1