harvest
Warn
Audited by Snyk on Apr 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). Harvest explicitly fetches and ingests user-generated GitHub content (PRs, releases, workflow runs) via the GitHub CLI (see SKILL.md COLLECT phase and references/gh-commands.md showing gh pr list / gh release list calls), and it parses and acts on those PR titles/descriptions to generate reports and recommendations, which exposes the agent to untrusted third‑party content that could carry indirect prompt injection.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata