skills/gjkim42/kanon-repo/pr-finish/Snyk

pr-finish

Warn

Audited by Snyk on Jun 22, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested via GitHub PR review state and comments fetched at runtime (e.g., gh pr view ... latestReviews,reviews,comments and gh api .../pulls/<pr>/comments --paginate), which contain other contributors’ review/issue/comment bodies.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 22, 2026, 01:21 AM

Issues

1

Security Audit — snyk — pr-finish