skills/paulnsorensen/skillz-that-grillz/copilot/Snyk

copilot

Warn

Audited by Snyk on Jul 18, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). In review mode, the workflow runs gh pr view / gh pr diff / gh api .../pulls/${PR}/files to fetch outsider-authored PR title/body/patches and file contents from GitHub at runtime, which are then used to generate Copilot review comments (indirect prompt-injection risk via PR text).

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 18, 2026, 02:45 AM

Issues

1

Security Audit — snyk — copilot