review-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to call Gitee MCP tools (get_pull_detail, get_diff_files, list_pull_comments, get_file_content) to fetch PR descriptions, diffs and user comments from Gitee — user-generated, third-party content that the agent must read and that materially drives review decisions and posting comments.