qodo-pr-resolver

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow (Step 3 and Step 6/7, plus providers.md/gerrit.md) explicitly fetches PR/MR review comments from external git providers and extracts Qodo "Agent Prompt" content from those comments and then executes those prompts literally to make code changes, so untrusted third‑party PR comments can directly influence tool actions.