synthesis-code-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow explicitly instructs the agent to fetch and review external contributor branches and PR diffs from repositories (e.g., "Step 1: Assess — Fetch the branch and review the diff" and numerous git/GitHub commands like git fetch, git log, git checkout and PR manifest checks in SKILL.md), which are untrusted, user-generated third‑party inputs that the agent must read and that can materially change integration decisions and actions.