wk-pr-takeover
Warn
Audited by Snyk on Aug 19, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In wk-pr-takeover Step 2 “Fetch PR Context”, it reads outsider-authored GitHub PR content at runtime via
gh pr view ... body,gh api .../pulls/$PR_NUMBER/comments ... .body,gh api .../issues/$PR_NUMBER/comments ... .body, andgh pr diff "$PR_NUMBER"(diff text), all of which are free text written by PR authors/reviewers and accessible based on an attacker-chosen PR number/URL.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata