pr-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill directly fetches and ingests user-generated PR content from GitHub using commands like gh pr view, gh pr diff, and gh api repos/{owner}/{repo}/pulls/{number}/files, so it will read untrusted third-party content as part of its workflow and is exposed to indirect prompt injection.