nemoclaw-maintainer-find-review-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly runs gh pr list and gh pr view to fetch PR titles, bodies, and metadata from a GitHub repository (user-generated, potentially public PRs/issues), and the agent parses and uses those bodies to detect duplicates/superseded PRs and make review recommendations, so untrusted third-party content can materially influence actions.