github-archive
Warn
Audited by Snyk on Aug 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Skill
github-archivequeries immutable GitHub event history from thegithubarchiveBigQuery dataset (including attacker-submitted PR titles/bodies, issue comments/bodies, and commit messages) using SQL and payload fields like$.issue.body,$.pull_request.body, and$.comment.body, so outsider-authored GitHub content is directly ingested at runtime when forming/executing the query.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata