pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md workflow explicitly instructs the agent to fetch and read user-generated PR/MR content (e.g., "gh pr view --json body" and commands to read PR descriptions, commits, diffs in Phase 1/2), so it ingests untrusted third-party repository content that directly drives review actions and issue/comment creation.