skills/infrasity-labs/dev-gtm-claude-skills/pr-review-expert/Snyk

pr-review-expert

Warn

Audited by Snyk on Jun 30, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). The workflow ingests outsider-authored free text from GitHub PRs via gh pr view $PR --json title,body,... (PR title/body are user-generated) and from the PR diff via gh pr diff $PR which is then parsed as readable text (/tmp/pr-$PR.diff) for analysis and report generation.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 30, 2026, 05:33 PM

Issues

1

Security Audit — snyk — pr-review-expert