gh-pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime path gh pr-review review view (and related thread/list commands) fetches PR review threads and comment bodies authored by other GitHub users (outsider-authored free text) and returns them as readable JSON fields like body/thread_comments into the agent/LLM context.