NYC

debugging-complex-multi-layer-systems

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.70). The skill instructs using the GitHub CLI and git operations (e.g., "gh pr checkout", "gh pr view", "git fetch" and remote repo URLs like YIC-Triumph/trinote2.0), which involve fetching and interpreting user-generated content from public GitHub repositories (an untrusted third-party source).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 12:13 AM