guided-flow-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses GitHub CLI (gh pr view) to inspect PR metadata (title, body) and git diffs, which allows an outsider who opens a pull request to submit free text into the agent's runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The instruction to install a skill using npx skills add xpepper/pr-review-agent-skill/guided-flow-review fetches remote code from an unofficial GitHub repository at runtime, establishing a medium-tier common/reputable unofficial operational dependency.