prepare-release
Warn
Audited by Snyk on Jul 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). SKILL.md’s runtime workflow uses
git log/git diffoutput (commit messages and diffs authored by community contributors/outsiders) as free-form text inside the LLM prompt via thegemini ... "Analyze these git changes ... $(git log ...) $(git diff ...)"path.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata