github-issues
Warn
Audited by Snyk on May 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and reads user-generated GitHub issue content via GitHub API calls and gh commands (e.g., the curl calls to https://api.github.com/repos/$OWNER/$REPO/issues and the "gh issue list/view" steps in SKILL.md), and the triage workflow requires interpreting that issue text to decide labels, assignments, comments, and closures, so untrusted issue content could influence agent actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata