pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md step 1, the runtime uses GitHub CLI to read the outsider-authored PR issue/PR body and comments (gh pr view --json body and gh pr view "$pr" --comments), then also fetches and reads linked issues and their comments (gh issue view <N> --comments) via text-extracted issue/PR links.