feature-delivery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly reads and syncs GitHub Issues and PRs (via the gh CLI and the design-to-issues / user-story-delivery / post-implementation-reviewer workflows) and treats those user-generated GitHub issue/PR contents as inputs that drive decisions and next actions, exposing the agent to untrusted third-party content from GitHub.