om-pr-autopilot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). This dispatcher skill reads PR/issue bodies, diffs, review thread data, and issue comments via tracker operations like get-pr, get-pr-files/get-pr-diff, list-issue-comments, and update-comment, so outsider-authored text submitted in those tracker items can reach the LLM at runtime during diagnosis/classification.