dev-review-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow explicitly fetches and ingests GitHub PR content (via "gh pr view"/"gh pr diff") and instructs the agent to read PR description/body, linked issues, and existing review comments — all user-generated, third-party content that the agent uses to drive analysis and decisions, exposing it to indirect prompt injection.