lno-prioritize

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). Yes — SKILL.md explicitly states it "Fetches issues from Linear or GitHub" (see "What Happens" step 1 and "Integration Options") and the agent reads and categorizes those user-generated issues and can update/create labels or issues, so untrusted third-party content can materially influence agent decisions and actions.