cmd-fix-pr-chechers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md workflow explicitly inspects GitHub Actions logs via gh run list and gh run view --log-failed, which ingests untrusted/user-generated CI log output from a third-party service and uses that content to drive automated analysis and code-fix actions.