skills/foryourhealth111-pixel/vibe-skills/receiving-code-review/Snyk

receiving-code-review

Warn

Audited by Snyk on May 11, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.80). The skill explicitly handles external reviewer feedback (including "CodeRabbit, GitHub, PR" per the SKILL.md header) and instructs interacting with GitHub inline review comments via the API in the "GitHub Thread Replies" section, so untrusted, user-generated review content is read and can materially influence decisions and actions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

May 11, 2026, 02:49 PM

Issues

1

Security Audit — snyk — receiving-code-review