openclaw-github-dedupe
Warn
Audited by Snyk on Feb 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The SKILL.md workflow explicitly fetches and ingests public, user-generated GitHub content (e.g., "gh pr view ...", "gh issue view ... --json comments", "gh pr diff") and the agent is expected to read and act on that content to decide merges/closures, so untrusted third-party posts could inject instructions influencing tool use.
Audit Metadata