review-driven-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Phase 1 explicitly fetches issue details from third‑party platforms (e.g., "gh issue view --json title,body,labels,assignees" and asking for an arbitrary issue URL), and the agent is required to read and act on issue bodies for planning and implementation, so untrusted user-generated content can directly influence actions.