github
Warn
Audited by Snyk on Apr 12, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md explicitly instructs using the
ghCLI andgh apito fetch PR data, workflow run logs, and other GitHub content (e.g., "gh pr checks", "gh run view", "gh api repos/owner/repo/pulls/..."), which are user-generated/public third-party sources and are read/interpreted by the agent as part of its workflow and could materially influence actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata