github-pr-fix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and ingests PR files, comments, and review threads from GitHub using gh and GraphQL (see SKILL.md gh api/gh pr view commands and references/pr-fix-workflow.md reviewThreads/issue comments), which are untrusted user-generated third-party content that the agent reads and uses to decide fixes and publish replies.