shipping-pr-reviews
Warn
Audited by Snyk on Jun 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.75). The dynamic workflow reads the PR diff via
git diff ${base}...HEADand has agents ingest surrounding code/text from that diff (which includes outsider-authored changes from other contributors), creating an indirect prompt-injection path into the LLM context.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata