full-code-review
Warn
Audited by Snyk on Oct 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required workflow uses the
ghCLI to fetch PR diffs and metadata (gh pr diffandgh pr view), which ingest untrusted PR content and code diffs authored by outsiders into the reviewer and verifier agent prompts.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata