cx-pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s runtime workflow ingests only trusted PR metadata (e.g., gh pr view --json title,body) and then relies on repository-local diffs via git diff/grep, not arbitrary outsider-authored free text fed into a monitored queue/feed by the workflow.