pr-code-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill explicitly fetches and reads GitHub pull request diffs and metadata (see SKILL.md steps 2 and 4 and references/gh-cli.md commands like gh pr view and gh pr diff), which are user-generated, public third-party content that the agent ingests and uses to decide actions and post review comments.