pr-review-address-feedback

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Phase 1 FETCH explicitly instructs using the gh CLI to retrieve user-generated PR feedback from GitHub (repos/{owner}/{repo}/pulls/{pr_number}/reviews, /comments, and /issues/{pr_number}/comments), which are untrusted third-party sources the agent must read and that can directly influence validation decisions and subsequent automated fixes.