biome-linting

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's CI integration (GitHub Actions examples using actions/checkout and running biome ci ., plus the PR comment processing step) checks out and analyzes repository/PR content — i.e., user-provided/untrusted code and PR data — which the agent would ingest and interpret as part of its workflow.