skills/microsoft/mcp/mcp-code-reviewer/Snyk

mcp-code-reviewer

Warn

Audited by Snyk on Sep 5, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The agent skill reviews GitHub pull requests, reading PR descriptions, commits, diffs, and comments authored by contributors, exposing the agent to untrusted external free text via PR code and content.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 5, 2026, 04:30 AM

Issues

1

Security Audit — snyk — mcp-code-reviewer