release-manager
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). This skill explicitly fetches and parses public, user-generated content (GitHub PRs, issues, and Actions workflow logs via the gh CLI in monitor-pr.fsx, monitor-release.fsx, resume-release.fsx and prepare-release.fsx) and queries NuGet.org (validate-release.fsx), and those parsed results directly drive decisions like auto-merge, resume/retrigger workflows, and release actions—so untrusted third-party content can materially influence tool use.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The F# scripts include runtime package directives that fetch and execute remote NuGet packages (e.g. #r "nuget: Argu, 6.2.4" and #r "nuget: Spectre.Console, 0.53.0"), which causes code to be downloaded from NuGet.org at script runtime and thus are external runtime dependencies that execute remote code.
Audit Metadata