clean-code-reviewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly ingests and analyzes arbitrary user-provided code ("Your job is to review code the user provides" in SKILL.md), which is untrusted user-generated content the agent is expected to read and use to drive decisions, so it can enable indirect prompt injection via embedded/instructive content in those submissions.