create-pr-text
Warn
Audited by Snyk on Mar 9, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md step 3) calls "gh issue view" to fetch GitHub issue content—user-generated, potentially public/untrusted text—which the agent is expected to read and use to craft PR titles/descriptions, so that third-party issue content can materially influence its outputs.
Audit Metadata