create-milestone

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads existing milestones via backlog_list_milestones to check for duplicates, which ingests metadata (titles) from the repository's existing milestones that could theoretically be authored by external contributors, presenting an indirect prompt injection risk via repository issue/milestone data.