setup-repo
Warn
Audited by Snyk on Oct 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The workflow templates include an AI review action (
ai-review.yml) triggered by issue and PR review comments, which allows any outsider to submit free text (via comment body) that is directly ingested and processed by the LLM agent.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata