code-reviewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow explicitly instructs the agent to "Read the PR description, linked issue, or stated goal" (Instructions step 1), which are user-generated/third-party contents the agent must ingest and that can materially influence review decisions, so it exposes the agent to untrusted external content.