pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md workflow and Usage explicitly require reviewing a Pull Request URL ("Review this Pull Request: ") and adding a git remote for the PR branch, meaning it fetches and interprets untrusted, user-generated PR content that can materially influence actions and decisions.