contributors-update
Warn
Audited by Snyk on Aug 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). Source and runtime path: it reads outsider-authored GitHub PR titles/descriptions/comments and metadata via
gh pr list ... --json number,title,author,mergedAtplus PR-context inspection to generate README entries (steps 3–4), so attacker-submitted PR text can be ingested at runtime.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata