code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s runtime workflow reads git diffs and looks up specs via in-repo sources plus an “issue-tracker” workflow (it does not ingest arbitrary outsider-authored free text directly as part of the required steps; any external issue text is only pulled via the separate, specified issue-tracker integration).