nemoclaw-maintainer-triage
Warn
Audited by Snyk on Apr 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and reads GitHub issues and PRs via gh issue/pr view and list (NVIDIA/NemoClaw repo) — user-generated, public content whose titles/bodies the agent must interpret to decide labels and comments, so untrusted third-party text can influence tool use and actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata