curate-release
Warn
Audited by Snyk on Aug 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In Phase 2 (Intent) the skill ingests outsider-authored free text from the triggering GitHub PR—specifically the PR title, body, and review comments, and it further follows issue references in those texts to read those issues and their comments.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata