golang-continuous-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow configuration (assets/claude-code-review.yml) reads pull request metadata, diffs, and comments written by outsiders on GitHub pull requests.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill references a remote GitHub repository via the skills CLI installation command (npx skills add https://github.com/samber/cc-skills-golang) to fetch and install runtime skill material, constituting an unofficial operational dependency.