skills/nvidia/megatron-lm/mcore-create-issue/Snyk

mcore-create-issue

Warn

Audited by Snyk on Jun 22, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). The skill ingests outsider-authored free text from GitHub Actions job logs at runtime via gh api repos/NVIDIA/Megatron-LM/actions/jobs/<job_id>/logs, which returns arbitrary log output (including stack traces/error messages) produced by external CI runs/users.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 22, 2026, 06:56 AM

Issues

1

Security Audit — snyk — mcore-create-issue