collapse-bot-comments
Warn
Audited by Snyk on Apr 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly lists and reads PR issue comments from GitHub (user-generated third-party content) via the gh API as part of its required workflow (SKILL.md steps 2–5), so untrusted comment text could influence how the agent rewrites and issues edits.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata