skills/zxkane/autonomous-dev-team/autonomous-review/Snyk

autonomous-review

Warn

Audited by Snyk on Mar 21, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 1.00). The skill explicitly reads ALL issue comments for "Requirement Drift" and extracts a preview URL from PR comments which it then navigates to via Chrome DevTools MCP for E2E verification (see SKILL.md "Requirement Drift Detection" and "E2E Verification" sections), meaning it ingests and acts on arbitrary, user-provided third-party content.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Mar 21, 2026, 12:59 AM

Issues

1