describe-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads GitHub PR bodies, titles, and commits via the GitHub CLI, and the workflow explicitly scans and incorporates PR body text into generated descriptions and write-backs, allowing an outsider-authored PR body or comment to inject untrusted free text into the agent's processing.