resolving-pr-comments
Warn
Audited by Snyk on Nov 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required step 2 workflow fetches every inline comment, review body, conversation comment and check on the PR, and anyone who can comment on the PR can write into those feeds without the agent selecting a specific item first.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata