jackin-refresh-pr
Warn
Audited by Snyk on Aug 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). At runtime, the workflow reads outsider-authored PR content via
gh pr view <PR> --json ... ,body(and also diffs/logs) before reconciling the body prose and blocks, so an outsider can influence the free text the agent ingests by submitting or editing a PR.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata