github-code-review

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most links are to official GitHub documentation and API endpoints (low risk), but the two GitHub repositories under the third‑party user "ruvnet" are unvetted, user‑hosted projects referenced as runtime dependencies (npx/CLI usage) and thus present a moderate-to-high risk as potential malware distribution points.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill github-code-review fetches PR attacker-authored text/diffs at runtime via gh pr view --json files,title,body,labels and gh pr diff (used as --pr-data and --diff for the swarm), so outsider content in PR bodies/comments/issues is ingested by the LLM workflow.