pr-link-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill fetches GitHub issue comments at runtime via gh issue view ... --json comments and then extracts the .body text from the linear-linkback comment (outsider-authored free text from the GitHub issue thread), which is then used to construct the PR body and thus becomes LLM-readable context.