agentic-labeler

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests and interprets public, user-generated content from the dotnet/maui GitHub repository—specifically PR changed files and issue titles/bodies and label listings via the list_label/get_label tool calls described in SKILL.md—so external content can materially influence labeling decisions and tool actions.