find-review-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's required workflow (Step 1 and Step 3 in SKILL.md) uses the GitHub CLI to fetch open PRs and run gh pr view to read PR titles/bodies/metadata from public GitHub repositories—user-generated, untrusted content that the agent parses (Step 2 and Step 4) and uses to influence recommendations and next actions.