github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly reads and acts on user-generated GitHub content (e.g., PR titles/bodies, issues, and workflow run logs via commands like gh pr view --json title,body,..., gh issue list, and gh run view) which are open/public third-party sources and can materially influence agent decisions or actions.