verify-tests-fail-without-fix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The verify-tests-fail skill reads and acts on untrusted, user-provided PR content (it auto-detects test and fix files via git diff/merge-base and parses changed test files in Get-AutoDetectedTestFilter, and also queries PR metadata via gh pr view/list) and uses that content to decide which tests to run, which files to revert/restore, and what labels/reports to produce, so third-party PR content can materially influence its behavior.