review-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill uses the gh CLI to fetch PR details, diffs, and PR bodies (via gh pr view and gh pr diff) and then instructs the agent to interpret those user-generated PR descriptions and code changes to decide merges/releases, so untrusted third-party content from GitHub PRs could materially influence actions.