outside-to-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source SKILL.md describes the runtime transformation reading all .md files from the repository path ai-docs/reviews-pr-<PR>/outside/ and embedding their “review-details-content” into generated issue bodies, so any outsider-authored text submitted into those outside/ files is ingested by the workflow without first selecting a specific item.