review-dispatch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the runtime path /review → Step 3 “Resolve the Target to Diffs” reads externally authored repository/PR diff content via gh pr diff (and for prs, loops over gh pr list --state open then gh pr diff <number>) before delegating to the review engines, so outsider-submitted code/PR text can be ingested for analysis without an item being selected first.