requesting-code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Source files SKILL.md and code-reviewer.md define a “code reviewer” subagent prompt that ingests only attacker-provided text via the developer’s placeholders ({DESCRIPTION} and {PLAN_OR_REQUIREMENTS}) and the git diff range (BASE_SHA..HEAD_SHA) for the selected commits, rather than monitoring a public queue/feed for outsider submissions.