pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s Step 4 reads outsider-authored GitHub PR content at runtime via gh pr view <number> --json ... body and gh pr diff <number> (including follow-up --comments and commit messages), so an outsider can submit/pollute PR text that the agent ingests.