release-status
Warn
Audited by Snyk on Oct 14, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow monitors GitHub issues and pull requests via
gh pr list, which allows outsiders to submit untrusted free text into the consumed PR titles and commit messages.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata