skills/lobehub/lobe-chat/pr/Snyk

pr

Warn

Audited by Snyk on Apr 8, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.70). The skill explicitly queries and reads user-generated GitHub content using "gh pr list" and "gh issue list" in the required workflow (Steps 1 and 4), exposing the agent to untrusted third-party issue/PR text that can influence PR creation/linking actions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 8, 2026, 02:13 PM

Issues

1