pr-review-loop
Warn
Audited by Snyk on May 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and processes user-generated PR review comments (e.g., via ~/.claude/skills/pr-review-loop/scripts/get-review-comments.sh and summarize-reviews.sh called in SKILL.md) and uses those comments to decide fixes, replies, commits, and trigger further actions, so untrusted third‑party content from GitHub can materially influence agent behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata