merge-pr-check

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to call Gitee MCP tools like list_pull_comments and get_diff_files to read PR descriptions, reviewer comments, and diffs (user-generated content) and to base merge decisions/actions on that content, allowing untrusted third-party input to influence behavior.