using-gitee-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs using gitee-cli commands that fetch and read public, user-generated Gitee content (e.g., "gitee issue view I123 --comments", "gitee pr view 42", "gitee repo view"), so the agent would ingest untrusted third-party text that could alter subsequent actions.