resolve-pr-feedback
Warn
Audited by Snyk on Oct 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required workflow fetches and processes pull request review comments, review bodies, and issue comments from GitHub pull requests, which can be authored by arbitrary external contributors.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata