pr-review-navigator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly runs gh pr view --json title,body,files,... and gh pr diff <pr-number> to ingest PR descriptions, file diffs, and file contents from GitHub (user-contributed, untrusted content) and uses that content to determine review order and generate comments/output, so third-party text can directly influence agent behavior.