cycle

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's monitoring and agent templates (e.g., gh api repos/{{OWNER}}/{{REPO}}/pulls/{{PR_NUMBER}}/comments in templates/lead-monitoring-loop.md and the use of {{COMMENT_LIST}} in templates/pr-agent-prompt.md) explicitly fetch and inject GitHub PR comments—untrusted, user-generated content—into agent prompts that drive fixes and actions.