code-review-playbook

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's review workflow and scripts (notably scripts/review-pr.md, scripts/fetch-pr-data.sh, and scripts/run-pr-checks.py) explicitly auto-fetch and parse GitHub PRs, diffs, and comments via the gh CLI — untrusted, user-generated third-party content that the agent consumes and uses to drive review decisions and actions.