matematic-patron-pr-review-pl

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md itself is static internal policy, but the required runtime workflow explicitly instructs the agent to “Pobierz diff” from a GitHub PR / local branch and “Czytaj aktualny kod jako source of truth” (i.e., it will ingest outsider-authored PR diff text and file contents into the LLM context).