check-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md specifies the required runtime behavior is to inspect exactly one GitHub PR and review threads (e.g., to ensure “every currently open review thread has been inspected through its latest reply”), which necessarily ingests outsider-authored free text from the PR’s review comments at runtime.