project-session-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches PRs and issues from public provider APIs/CLIs (e.g., "Fetch PR info" using gh pr view in SKILL.md and lib/providers/*.sh which call gh/curl/az/jira), and those user-generated PR/issue titles and bodies are parsed and used to create branch names, worktrees, session metadata and to launch the Claude Code agent, so untrusted third‑party content can materially influence actions.