update-pr
Warn
Audited by Snyk on May 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The workflow explicitly reads and acts on user-authored GitHub content (e.g., "gh pr view --json body,url,title" and .github/pull_request_template.md), which is untrusted, user-generated third-party content that the agent interprets to decide and perform edits on the PR.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata