visual-pr
Warn
Audited by Snyk on Sep 17, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow reads local git state, task artifacts, and GitHub pull requests using
gh pr view, which ingest repository content and potentially external PR inputs (such as contributor comments or issue descriptions if parsed/read).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata