drive-pr-local-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill's SKILL.md explicitly requires reading GitHub PR title/body and linked external/off-branch spec files and even fetching Linear tickets to refine requirements (see §2.2 and §2.3), which are user-generated/untrusted third-party sources that the agent must ingest and that can materially influence its review decisions.