vp-git
Warn
Audited by Snyk on Nov 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required PR review and merge workflow has the agent read GitHub review threads, discussion comments, and checks on the current head, which outsiders can post to on any PR, so this is a GitHub PR reading path that is medium.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata