get-pr-comments
Warn
Audited by Snyk on Jun 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). Outsider-authored free text: the skill’s runtime step “Fetch review comments and discussion comments” pulls PR comment bodies written by other contributors (e.g., other developers) and feeds them into the LLM for summarization.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata