sync-xips
Warn
Audited by Snyk on Apr 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's scripts (e.g., .ai/skills/sync-xips/scripts/sync-from-github.ps1 and merge-old-xips.{ps1,sh}) call the
gh issue list/gh issuecommands against the public ShareX/XerahS GitHub repository and read issue titles and bodies (user-generated content) to drive labeling, create/edit issues, and write local XIP files, so untrusted third-party content is fetched and directly influences actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata