Git Workflows
Warn
Audited by Snyk on Mar 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly runs git fetch (e.g., "git fetch --all --prune" in /git-sync and "git fetch origin main" in /git-merge-main and scripts) and the /git-conflicts workflow states the agent will "read the file content" and analyze commits/diffs from origin/main, so it ingests and acts on user-generated remote repository content (remote commits/files) which can materially influence merge/conflict-resolution actions.
Audit Metadata