pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow runs graph-it review-pr (and follow-up graph-it tool ...) which ingests the repository diff/output to produce markdown/structured reports for the agent; since PR/commit diffs are outsider-authored content (by other contributors), the tool output can include arbitrary free text from changed files and get fed into the LLM context for interpretation.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly installs and runs third-party code (the @magic5644/graph-it-live CLI referenced at https://www.npmjs.com/package/@magic5644/graph-it-live and the GitHub Action magic5644/Graph-It-Live/.github/actions/graph-it-review-gate@v1.13.0), which are fetched and executed at runtime by the workflow/commands.