agent-project-board-sync
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests GitHub data (e.g., "ISSUES=$(gh issue list ...)" and "PROJECT_DATA=$(gh project item-list $PROJECT_ID ...)" and uses flows like "board-import-issues --parse-checklist" and analytics/auto-assignment that parse issue/project content, so untrusted, user-generated GitHub content would be read and used to drive decisions and actions.
Audit Metadata