skills/ndpvt-web/arxiv-claude-skills/following-dragons-code-review-guided/Snyk

following-dragons-code-review-guided

Warn

Audited by Snyk on Jun 21, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). The workflow’s “Collect review comments” step ingests PR/issue/wiki/discussion review comment text authored by other people (outsider free-form natural language) into the LLM for the coarse/fine CWE classification passes, creating an indirect prompt-injection risk.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 21, 2026, 11:52 PM

Issues

1

Security Audit — snyk — following-dragons-code-review-guided