pr-landing-discipline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads PR details, reviews, issues, and commit comments via GitHub CLI commands (gh pr view, gh api), which ingest outsider-authored free text from pull requests and comments.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The README instructs installing the skill via npx skills add https://github.com/Vivswan/skills/tree/main/skills/pr-landing-discipline -g, creating an operational external dependency on an unofficial GitHub repository.