fix-pr-issues

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md:12-15 requires collecting “PR comments and review summaries,” “inline review comments and unresolved review threads,” and “failed GitHub Actions jobs and relevant logs,” which are outsider-authored free text from GitHub PR participants and are ingested at runtime into the agent’s context.