prepare-branch-context

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). At runtime the skill runs git diff main...HEAD and git log main..HEAD (and optionally gh pr ... --json ... --jq '.[0]' to read PR body/comments), which ingests repository text authored by others via PR/commit history/diff content into the agent’s LLM context.