code-reviewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly checks out remote GitHub pull requests and instructs the agent to "read PR 描述和现有评论" (PR description and comments) from that remote source (via gh pr checkout), which are user-generated, untrusted third-party content that the agent will interpret as part of its review workflow.