paseo-epic
Warn
Audited by Snyk on May 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The skill explicitly instructs agents to read and act on repository-hosted, user-generated content—e.g., using
gh pr list --state mergedto infer merge conventions andgh pr checks/ CI failure logs to drive fixes—meaning it ingests untrusted third-party PR/CI content that can influence tool actions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata