krt-release-marshal

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly runs gh commands (e.g., "gh repo view", "gh pr list --head", and "gh pr list --base ... --state merged" in references/github-pr-flow.md) to read GitHub PRs, metadata, and reviewer activity—untrusted, user-generated third-party content that the agent ingests and uses to decide reviewer selection and PR actions.