git-workflows

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s runtime path is primarily executing git/gh commands locally (e.g., gw git worktree create/finish fetching a worktree based on an issue ID, and gh pr/view/list reading PR/issue content only when specific items are selected), which does not indicate a required workflow that ingests arbitrary outsider-authored free text without an explicit item selection step.