gh-review-requests
Warn
Audited by Snyk on Feb 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and scripts/fetch_review_requests.py explicitly call the GitHub CLI (gh api notifications, repos/.../pulls, orgs/.../teams, etc.) to fetch GitHub notifications and PR data—user-generated, third‑party content—which the agent reads and uses to decide which PRs to surface.
Audit Metadata