skills/lucking7/compound-engineering-skills/ce-resolve-pr-feedback/Snyk

ce-resolve-pr-feedback

Warn

Audited by Snyk on Jun 23, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.95). Runtime LLM context is populated from PR review thread/comment text fetched via GitHub GraphQL in scripts/get-pr-comments (and scripts/get-thread-for-comment for targeted mode), which is outsider-authored free text from other users on the PR.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 23, 2026, 09:14 PM

Issues

1

Security Audit — snyk — ce-resolve-pr-feedback