gh-review-suggestions
Warn
Audited by Snyk on Jun 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The workflow ingests PR-authored free text/diffs via
gh pr viewandgh pr diff <pr> > /tmp/pr.diff, and that diff content is then read as UTF-8 and processed into LLM context for review/comment drafting (outsider-authored PR content).
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata