contrib-pr-review
Warn
Audited by Snyk on Aug 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the workflow reviews an externally submitted PR by calling GitHub’s API endpoints at runtime to read PR metadata, bot review bodies, PR review comments, and issue comments authored on the PR (e.g., /repos/.../pulls/$ARGUMENTS/reviews, /comments, and /issues/$ARGUMENTS/comments, plus PR body/comments), so outsider-authored free text is ingested via GitHub issue/PR reading.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata