github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md describes a GitHub skill that uses gh CLI subcommands (e.g., gh pr checks, gh run list, gh run view, gh api repos/.../pulls/...) but does not specify any runtime workflow that automatically reads outsider-authored free text without first selecting specific PR/run targets.