triaging-issues
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). This SKILL.md explicitly directs the agent to gather and analyze GitHub issues and PRs using gh CLI commands (e.g., "gh issue list/view" and "gh pr list/view/diff"), which are user-generated, potentially untrusted third‑party content that the agent must read and which can materially influence triage decisions.
Audit Metadata