create-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses remote tracker content (e.g., the GitHub-created body via "created_body=$(gh issue view ...)" and the JIRA_RESPONSE / ISSUE_RESPONSE API responses in Step 3), which are user-generated/untrusted third‑party contents that the workflow inspects and uses to decide actions (e.g., aborting on unsubstituted tokens).