github-review-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and reads user-generated GitHub content—PR diffs/views, code comments, git blame/history, past PR comments, and repository guidance files like CLAUDE.md and AGENTS.md via the gh commands described in the workflow—so untrusted third-party content could influence review decisions and agent actions.