reviewing-prs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the GitHub PR review workflow, the agent runs gh pr view/gh pr diff to ingest the outsider-authored PR title/body/comments and diff text at runtime (SKILL.md lines 17-22 and 25-26), enabling indirect prompt-injection via PR content before any user approval gate is applied to posting.