review-pr
Warn
Audited by Snyk on Apr 23, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The skill's Review Workflow (SKILL.md Phase 1/Phase 2) requires running git/gh commands and fetching PR diffs, PR descriptions, and repository files (e.g., README.md, CLAUDE.md, contributor-written files) from GitHub — untrusted, user-generated third-party content that the agent must read and that directly drives tool use and decisions.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata