review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly runs gh pr view and gh issue view to fetch PR details and linked issue content from GitHub, which are user-generated/untrusted third-party sources that the agent will read and interpret.