argos-pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill instructs the agent to fetch and inspect Argos build data and snapshots (e.g., head.url / base.url and head.metadata) via the Argos CLI and to read PR title/description and code diffs from external PR context—all user-generated/untrusted inputs—which are then used to drive review decisions and CLI actions, so untrusted third-party content can materially influence agent behavior.