code-reviewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the skill’s required workflow, the agent reads “PR description” and reviews the submitted pull request (plus linked issues/tickets) as the runtime context for the code review, which is outsider-authored free text that can include prompt-injection payloads.