skills/product-on-purpose/pm-skills/utility-update-pm-skills/Snyk

utility-update-pm-skills

Warn

Audited by Snyk on Oct 17, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (low risk: 0.10). The skill fetches release metadata and release notes from GitHub during its pre-flight check, exposing the agent to untrusted external release content.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Oct 17, 2026, 06:28 AM

Issues

1