neo-code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md step 1, the workflow ingests “files or snippets supplied by the user” (and the working tree diff/untracked files via scripts/git-diff-reviewer.py) without requiring any first selection of a specific outsider-authored item, so outsider free-text/code can be posted into the repo/working tree that the runtime reads.