github-solution-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The skill’s required runtime workflow uses GitHub CLI to fetch and ingest public GitHub issue/PR/discussion/code/release text (outsider-authored free-form content) into the agent context via gh search issues/prs/... and subsequent gh issue view/pr view/repo view reads.