autofix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and parses live GitHub review thread bodies via scripts/fetch_unresolved_threads.py and gh GraphQL calls (see SKILL.md and github.md) and then reads those CodeRabbit-authored comment bodies to generate and apply fixes, so it ingests untrusted, user-generated PR comment text that can directly influence tool actions.