review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). This skill’s Phase 1 and TDD workflow explicitly ingests and reviews a Rails PR diff (via the referenced code-review/review-process/respond-to-review sub-skills) and treats PR text as untrusted, so an outsider’s submitted PR/issue text that becomes part of the diff/comments is directly exposed to the runtime.