find-bugs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md instructs the agent to read a runtime git diff output and then read surrounding changed file contents, which are outsider-authored free text if the branch/diff includes changes from other contributors (e.g., PR author), and that text is ingested into the LLM context as part of the review workflow.