complete-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md) instructs the agent to use fetch-pr and manage-pr-review-threads to read GitHub PR bodies and review thread comments—user-generated, public/untrusted content—which the agent must interpret and act on (e.g., change code, respond to reviews), enabling indirect prompt injection risk.