skills/open-mercato/skills/om-auto-qa-pr/Snyk

om-auto-qa-pr

Warn

Audited by Snyk on Aug 14, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). In PR mode, the skill reads outsider-authored PR content and diffs via the tracker operations get-pr/get-pr-diff (including PR body/comments/files) in steps 1–5, then uses that free text to derive/report the verification scenario.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 14, 2026, 05:24 AM

Issues

1

Security Audit — snyk — om-auto-qa-pr