scan-issues
Warn
Audited by Snyk on Mar 8, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). This skill explicitly fetches open GitHub issues via "gh issue list --repo" (Phase 1 in SKILL.md) and then analyzes issue content/labels as part of its workflow, meaning it ingests untrusted, user-generated third-party content that can influence decisions and tool use.
Audit Metadata