ai-code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow for this skill consumes a user-provided code diff/PR and its stated provenance as inputs, which can include outsider-authored free text (the PR content) without requiring the agent to first select a specific item beyond the PR itself.