gh-workflow
Warn
Audited by Snyk on Apr 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests user-generated GitHub content (PR conversation comments, reviews, review threads, and CI logs) via the GitHub CLI/GraphQL (see scripts/fetch_comments.py, inspect_pr_checks.py and SKILL.md modes like pr_receive_review/pr_review_comments), and that content is parsed and used to classify feedback and drive actions, so untrusted third-party input could inject instructions indirectly.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata