cr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL runtime path reads outsider-authored free text from GitBook change requests and their comments via GET /spaces/<space>/change-requests/<cr>/content/page/<pageId>?format=markdown and GET /spaces/<space>/change-requests/<cr>/comments?format=markdown&status=all, which are fed into the LLM for summarization/context after a CR is discovered.