review-pr
Warn
Audited by Snyk on Aug 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The runtime workflow fetches and ingests outsider-authored free text from GitHub pull request surfaces (issue comments, PR reviews, and inline comments) via
scripts/wait-for-reviews.shsnapshotting before applying triage and verdict rules.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata