ci-auto-fix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly fetches and reads user-generated GitHub CI/PR data (e.g., via "gh run view --log-failed", "gh pr checks", and "gh api repos/.../check-runs/...") and then interprets those logs/PR contents to decide and apply code or workflow fixes, so untrusted third-party content from GitHub could materially influence actions.