get-pr-comments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow (SKILL.md Step 2) runs scripts/fetch_pr_comments.py which calls gh api (e.g., repos/{owner}/{repo}/issues/<PR_NUMBER>/comments and pulls/<PR_NUMBER>/comments) to fetch GitHub PR comments — user-generated, third-party content that the skill parses to extract actionable instructions and drive follow-up actions.