skills/thodsaphonsonthiphin/workflow-daily-work/github-my-work/Snyk

github-my-work

Warn

Audited by Snyk on Aug 29, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The required workflow reads GitHub issue titles and labels via gh issue list, which exposes the agent to outsider-authored free text from repository issues.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Aug 29, 2026, 01:21 AM

Issues

1

Security Audit — snyk — github-my-work