skills/jeremylongshore/pr-to-prompt/pr-to-spec/Snyk

pr-to-spec

Warn

Audited by Snyk on Sep 9, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The required workflow includes analyzing remote GitHub pull requests via the CLI (pr-to-spec --repo OWNER/REPO --pr N), which reads pull request content authored by outsiders.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 9, 2026, 11:50 AM

Issues

1

Security Audit — snyk — pr-to-spec