pr-issue-review
Warn
Audited by Snyk on Jul 24, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The skill’s runtime context can include outsider-authored free text from PR metadata—e.g.,
gh pr viewfields liketitle/body, PR comments, and review comment bodies/comments—which are untrusted and can contain prompt-injection instructions; it also fetches/ingests other remote context from referenced Slack/Notion/Linear/GitHub issues if available.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata