ah-verify-requirements-coverage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses user-generated content from GitHub (e.g., PR bodies via gh pr view, issue text via gh issue view, and GraphQL/gh API calls) and uses that content to extract requirements and drive coverage analysis and reporting, so untrusted third-party text can materially influence the agent's actions.