triage-prs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill instructs the agent to fetch and read contributor-authored GitHub PR data and commit contents (e.g., via gh pr list, gh pr view, gh pr diff, and git show HEAD), which are untrusted, user-generated third-party content that the agent is expected to interpret to decide merges and follow-up actions.