premature-close-checker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill ultimately runs scripts/check-premature-close.sh, which (by its purpose) must read the body of a GitHub issue (outsider-authored free text) via the gh issue view/GitHub API and then posts a comment based on that content, so the LLM context can be fed issue body text authored by someone other than the operating user.