skills/okisdev/ai-reference/verify-pr-comments/Snyk

verify-pr-comments

Warn

Audited by Snyk on Apr 25, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 1.00). This skill explicitly fetches and ingests user-generated GitHub PR comments from third-party endpoints (e.g., "gh api repos///pulls//reviews", ".../comments", and "repos/.../issues//comments") and requires the agent to read and act on those untrusted review bodies when making verification decisions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 25, 2026, 03:18 PM

Issues

1

Security Audit — snyk — verify-pr-comments