review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md Phase 1 steps explicitly instruct fetching PR details and the linked issue with gh pr view and gh issue view, meaning the agent will ingest untrusted, user-generated GitHub PR/issue content that can influence review decisions and subsequent actions.