create-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly runs "gh issue view $ISSUE_NUMBER --json title,body,labels" (Step 2a) and copies the issue title/body/labels into the generated PR (Steps 5a/5b/5c), meaning it ingests user-generated GitHub issue content (untrusted third-party data) that will directly influence PR creation and metadata.