code-reviewer-colony

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow reads a git diff (from stdin, a provided diff file, or git diff output) via scripts/analyze_diff.py, and that diff content is free-form text authored by outsiders (e.g., PR authors) which can be ingested into the agent’s LLM context through the subsequent “load instructions → plan → execute” sub-skill routing.