github-workflow
Warn
Audited by Snyk on Apr 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This skill's workflow explicitly requires identifying and summarizing GitHub issues, PRs, branches, and review comments (SKILL.md "Identify the target issue, PR, branch, or review thread" and "Summarize requirements, review comments..."), which means the agent will read user-generated content from GitHub (a public/third-party source) that can materially influence decisions and subsequent tool actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata