#2708
Issues/vercel-labs/skills/#2708

[skills.sh] Re-index and re-audit creative-lid/high-signal-code-review after W011 fix

Openjstgermainopened 3d ago

Summary

Please re-index creative-lid/high-signal-code-review from its current main branch and re-run the Snyk audit. The published skill fixed the reported W011 indirect prompt-injection risk, but skills.sh still serves the pre-fix audit result.

Skill

Stale result

The audit API still reports the original Snyk result:

  • Status: warn
  • Risk: MEDIUM
  • Issue: W011, third-party content exposure
  • Audited at: 2026-11-09T17:27:05.433178+00:00

That timestamp predates the remediation commit.

Remediation

The current SKILL.md now:

  • limits review input to checked-out local files and Git diff, status, and ref data;
  • excludes free-form PR descriptions, issue bodies, discussions, review comments, arbitrary web pages, and other external content;
  • treats all reviewed repository content as untrusted evidence rather than instructions;
  • forbids following embedded commands, URLs, dependencies, or scope-changing requests; and
  • validates refs and paths as data before passing them to read-only inspection commands.

Reproduction

  1. Read the current SKILL.md at commit 076afa95c2ba54bc1e1042dcc45a5de323abd32c.
  2. Compare it with the W011 text still displayed on the Snyk audit page.
  3. Run a telemetry-enabled install from the public repository.
  4. Query https://skills.sh/api/v1/skills/audit/creative-lid/high-signal-code-review/high-signal-code-review.

A fresh telemetry-enabled install was completed after the fix, but the audit timestamp and result remained unchanged.

Request

Please synchronize the indexed skill from current main at or after commit 076afa95c2ba54bc1e1042dcc45a5de323abd32c and re-run the Snyk audit against that snapshot.

Activity

0

No activity yet.