skills/nvidia/nemoclaw/nemoclaw-maintainer-release-notes/Snyk

nemoclaw-maintainer-release-notes

Warn

Audited by Snyk on Jun 18, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow uses gh api repos/NVIDIA/NemoClaw/compare/... and then gh pr view <number> --json ... body to ingest PR body text authored by outsiders (e.g., external contributors) into the agent’s LLM context for drafting release notes.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 18, 2026, 05:27 AM

Issues

1

Security Audit — snyk — nemoclaw-maintainer-release-notes