cowork-plugin-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The "Code Review Bot Plugin" explicitly declares network access to api.github.com and its handler logic receives PR events, checks out PR branches, and analyzes diffs (user-generated code/comments) to decide and post review actions, so it ingests untrusted third-party content from GitHub that can influence tool use and decisions.