differential-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly accepts a PR URL or remote diff (Step 1: "If working from a PR diff URL, download the raw .diff or .patch and treat it as a local file"), so the agent ingests arbitrary public/user-generated repository diffs from the web which it must read and use to drive its findings and actions.