gitworkflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and processes user-generated GitHub content (e.g., "gh issue list" and "gh issue view --json comments" in workflows/IssueAnalysis.md, and PR/body inspection in workflows/PullRequest.md and workflows/CIMerge.md), and uses those comments/issues/PR bodies to decide labels, routing, PR-body edits, and merge actions, so untrusted third‑party content can materially influence tool behavior.