code-reviewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly checks out and reads remote Pull Requests (PR description and comments) from GitHub (via gh pr checkout and reading PR text), which ingests untrusted, user-generated content that the agent is expected to interpret.