create-pr
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's scripts (scripts/poll-pr.sh and scripts/triage-pr.sh) call gh/gh api to fetch PR checks, conversation comments, and review comment bodies from repos (e.g., repos/$repo/issues/$pr/comments and repos/$repo/pulls/$pr/comments), which are user-generated GitHub content the agent reads and acts on.
Audit Metadata