review-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly fetches and ingests user-generated PR content from GitHub (via gh pr diff <number> and gh pr view <number> --json files), which the agent is expected to read and use to drive its review decisions, exposing it to untrusted third-party content that could carry indirect instructions.