resolve-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly reads GitHub issue content (Phase 1: analyze-issue expects the issue title/body/labels via the gh CLI and Phase 2 uses gh issue view), and that user-generated, potentially public issue text is then used to generate PRDs, task plans, and drive the execute-tasks implementation, so untrusted third-party content can materially influence agent actions.