receiving-code-review
Warn
Audited by Snyk on Jun 13, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.85). The required workflow ingests “Incoming review feedback (PR comments, verbal review notes)” from GitHub PR comment threads at runtime, which are outsider-authored free text (i.e., other reviewers’ messages) and can be used for indirect prompt injection into the agent’s LLM context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata