milestones

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow centers on command-driven GitHub milestone operations, which at runtime would involve loading milestone details and candidate issues via GitHub APIs (e.g., issue titles/bodies/comments written by non-operator users), creating an indirect prompt-injection path from outsider-authored free text; this is not visible in the provided SKILL.md snippet itself, but it is explicitly part of the described runtime steps.