skills/github/github-mcp-server/release-preparation/Snyk

release-preparation

Warn

Audited by Snyk on Nov 15, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The required workflow reads GitHub pull requests (search_pull_requests at SKILL.md [28]-[32] and list_pull_requests at [37]-[39]) and commit messages, and anyone can open a PR or comment on a repository, so outsider-authored text reaches the agent without it selecting a specific item.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Nov 15, 2026, 06:58 AM

Issues

1