skills/yeachan-heo/oh-my-claudecode/project-session-manager/Snyk

project-session-manager

Warn

Audited by Snyk on Sep 15, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). The workflow reads GitHub issues and pull requests via the gh CLI (gh pr view and gh issue view), which ingest untrusted outsider-authored titles, bodies, and comments into the agent's runtime environment.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 15, 2026, 12:34 PM

Issues

1

Security Audit — snyk — project-session-manager