skills/pytorch/test-infra/release-create-validation-issue/Snyk

release-create-validation-issue

Warn

Audited by Snyk on Jun 29, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested via GitHub API responses that include issue/PR titles and especially the cherry-picks issue comments’ body field (repos/pytorch/pytorch/issues/{CHERRY_PICKS_ISSUE}/comments), which the skill then aggregates into the generated markdown context.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jun 29, 2026, 03:23 AM

Issues

1

Security Audit — snyk — release-create-validation-issue