address-pr-comments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s core runtime path uses the gh api repos/{owner}/{repo}/pulls/{pr_number}/comments and gh api .../pulls/{pr_number}/reviews endpoints to read PR review comment body text (outsider-authored by reviewers) at Step 2, then processes it further at Step 4.