verify-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill explicitly fetches and parses GitHub PR bodies, diffs, linked issues, reviews, and comments via gh pr view, gh pr diff, and gh issue view, so it ingests untrusted user-generated third-party content (PR/issue text and comments) and uses that content to drive verification decisions.