react-expert

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly clones and reads the public GitHub repo (https://github.com/facebook/react.git) and uses the gh CLI to fetch PRs and issues from facebook/react and reactjs/react.dev — all user-generated, untrusted third-party content that the agents are instructed to read and interpret.