pr-review
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly instructs fetching and reading PRs and diffs from GitHub using commands like "gh pr view ", "gh pr diff ", and "gh issue view <ISSUE_NUMBER>", which pull user-generated, public GitHub content that the agent is expected to interpret and use to drive review decisions.
Audit Metadata