om-followup-issue-from-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md step 2 fetches an outsider-controlled GitHub PR comment body via get-pr-comment/get-review-comment (or selects from listed PR conversation comments) using the user-pasted PR/PR-comment URL, so free text authored by the PR reviewer/outsider is ingested at runtime.