pr-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source: GitHub Pull Requests; runtime path: the skill lists and reads outsider-authored PR content via gh pr list / gh pr view (includes body, author, etc.) and then fetches diffs via gh pr diff NUMBER -R owner/repo / gh api .../pulls/NUMBER/files using the PR author’s untrusted text for rubric and commenting.