skills/innosage-llc/draft-skills/draft-review-loop/Snyk

draft-review-loop

Warn

Audited by Snyk on Apr 15, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.80). The skill explicitly reads user-generated Draft review comments using "draft comments list --json" and then applies accepted feedback to local files, meaning external review content can influence the agent's editing actions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 15, 2026, 08:44 AM

Issues

1