github-to-skills
Warn
Audited by Snyk on Feb 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's scripts/fetch_github_info.py explicitly fetches README content from raw.githubusercontent.com (public GitHub repos) and the SKILL.md workflow states the agent "analyzes the README" to plan invocation, exposing the agent to untrusted, user-generated third-party content that could contain injected instructions.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill's runtime fetch (urllib.request.urlopen) pulls README content from URLs like https://raw.githubusercontent.com////README.md and that fetched README is directly used at runtime to populate SKILL.md and to drive the agent's analysis/wrapper-generation, so remote content can control prompts/instructions.
Audit Metadata