skill-hunter

Warn

Audited by Snyk on Mar 10, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill explicitly uses the GitHub CLI (gh search, gh api, gh repo clone, gh browse, downloading SKILL.md files) to fetch and read public GitHub repository files (untrusted user-generated content), and those downloaded files are inspected and used to drive follow-up actions like adaptation, storage location, and commits.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 10, 2026, 07:24 AM