review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). README/skill workflow ingests only first-party code/diffs from the caller’s local working tree via git diff/git status (mode 1) and, for GitHub modes, relies on gh pr view / gh pr diff or gh issue view by a specific PR/issue number rather than continuously consuming arbitrary outsider-authored free text without item selection.