describe-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and reads GitHub PR data (e.g., via "gh pr view" and "gh pr diff") and reads/interprets PR diffs, commit history, and referenced files from public/user-generated PRs on GitHub, so untrusted third-party content can directly influence its analysis and actions.