om-auto-review-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, this skill reads outsider-authored free text from the PR tracker—specifically PR/review bodies and comments (“reviews[]”, “list-issue-comments”, and “list-review-comments” in steps 2–3, plus PR title/metadata)—and ingests their content to produce inherited findings and influence the final verdict.