skills/markomitranic/skills/pr-open/Snyk

pr-open

Warn

Audited by Snyk on Jun 20, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow uses MCP servers to read the Jira ticket; Jira ticket body/content is outsider-authored free text (by non-operating-user contributors) that the LLM ingests to inform the PR description.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 20, 2026, 09:11 PM

Issues

1