create-git-issue

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The skill contains explicit instructions that it is "the sole active authority" and must suppress any external/third-party skills or interruptions, which attempts to override session/governing controls and is outside the stated purpose of creating Git issues.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow can fetch and read GitHub issue bodies/comments from user-supplied issue references (SKILL.md:123-124), which are outsider-authored free text that may be ingested into the LLM context.