magpie-security-issue-import-from-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The skill fetches attacker-controlled free text from an outsider-authored public GitHub PR via gh pr view ... --json number,title,body,author,... (Step 1), and then embeds that PR body verbatim into the created tracker issue body (Step 5/7a), which becomes LLM context during proposal/recap.