skills/hyperlane-xyz/hyperlane-warp-ui-template/resolve-pr-reviews/Snyk

resolve-pr-reviews

Warn

Audited by Snyk on Jun 17, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.95). The skill fetches PR review/issue comments from GitHub at runtime via gh api repos/{owner}/{repo}/pulls/{pr}/comments and .../issues/{pr}/comments, and then reads/analyzes the comment body text (outsider-authored reviewer messages) to generate LLM analysis and replies.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 17, 2026, 09:59 PM

Issues

1

Security Audit — snyk — resolve-pr-reviews