pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). This skill’s required workflow ingests the PR diff via git diff <base>...HEAD (outsider-authored PR content) and then has the agent paste/quote that diff-derived text into the LLM-generated PR body, creating an indirect prompt-injection path from outsider free text.