create-pull-request
Warn
Audited by Snyk on Aug 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In SKILL.md step 3, the workflow uses
github_get_file_contentsto read outsider-authored (repository user) files like.github/pull_request_template.md/.github/PULL_REQUEST_TEMPLATE, then incorporates their free text into the PR body.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata