load-pr-comments

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s Step 2 (“Retrieve UNRESOLVED Comments”) loads PR review thread comment body text from the target GitHub pull request via gh api graphql ... reviewThreads ... comments{... body ...} (and/or the GitHub MCP get_review_comments tool), so outsider-authored comment text is ingested at runtime.