firstsun-project-init

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s workflow primarily reads trusted org-maintained catalogs (e.g., firstsun-dev/skills and firstsun-dev/.github), and it only optionally mirrors data from user-authored GitHub Issues into the harness if the user opts in (via init.sh running gh issue list), which requires active user enablement rather than unsolicited ingestion.