github-issue-query

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The query-issues.sh script (called by SKILL.md) runs gh issue list ... --json against a specified owner/repo and explicitly requests fields including "body", fetching user-generated GitHub issues from public/third-party repositories which the agent would read and could contain instructive content influencing subsequent actions.