skills/jamie-bitflight/claude_skills/receiving-pr-reviews/Snyk

receiving-pr-reviews

Warn

Audited by Snyk on Sep 3, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The workflow reads GitHub pull request reviews, review comment threads, issue comments, and reactions via the GitHub CLI, which contain untrusted outsider-authored content from PR reviewers and commentators.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 3, 2026, 12:27 AM

Issues

1

Security Audit — snyk — receiving-pr-reviews