PR Review
Warn
Audited by Snyk on May 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly ingests user-generated GitHub content — e.g., "Fetch PR Metadata Safely" (use read_url_content on the PR URL / gh pr view) and the get_pr_comments.sh script which fetches PR comments via the GitHub API — meaning untrusted PR descriptions and comments are read and used to shape review decisions and posted comments.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata