github-contributor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md workflow explicitly instructs using public GitHub data (see "Finding Projects" with gh search commands and multiple steps to read CONTRIBUTING.md, issues, and PRs in Project Evaluation), which are untrusted, user-generated third‑party pages the agent would be expected to read and interpret to decide next actions.