github-branch-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s required runtime workflow is GitHub branch/PR/CI/CD management, which typically ingests outsider-authored free text such as pull request titles/descriptions and review comments from other users via GitHub APIs/webhooks into the agent’s LLM context for decision-making.