repo-pitch
Warn
Audited by Snyk on Oct 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). The workflow reads PyPI and npm package registries over the network and GitHub repository metadata via the CLI tool
gh, which can expose the agent to untrusted external package summaries and descriptions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata