skills/laurigates/claude-plugins/git-commit-push-pr/Snyk

git-commit-push-pr

Warn

Audited by Snyk on Jul 31, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the runtime fetches “open issues” from GitHub (via gh issue list --state open) and then reads those issue bodies to auto-detect matches against staged changes, meaning outsider-authored GitHub issue text is ingested.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 31, 2026, 02:25 AM

Issues

1

Security Audit — snyk — git-commit-push-pr