github-code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow ingests GitHub PR metadata, changed-file lists, diffs, and “related issue text”/comment threads via the GitHub connector (e.g., PR description, issue/discussion bodies authored by outsiders), which are free-form text written by non-operating users and can be used for indirect prompt injection.