gh-plan-issues

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). Runtime path: the skill runs gh issue view / gh issue list with --json ... body,comments and then uses that issue body/comments text to cluster and sequence, so outsider-authored GitHub issue/PR discussion content is ingested into the agent’s LLM context.