triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md “Triage a specific issue or PR” Step 1 (“Gather context”) requires reading the full issue/PR body and comments (and PR diff), meaning outsider-authored free text from the issue tracker is ingested at runtime without selecting a specific pre-approved item first.