review-pr-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly pulls user-generated PR content (e.g., "gh pr view <PR_NUMBER> --json body" and "gh pr diff <PR_NUMBER>") and CI/log URLs from GitHub and uses those diffs/bodies/checklist items to generate review comments and merge decisions, so untrusted third-party content can materially influence actions.