feature-matrix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md describes runtime reading of an existing feature matrix file (e.g., docs/features.md) and, when present, running gh issue list ... --json ... ,body to ingest outsider-authored GitHub issue free text (body) into the agent’s context for clustering/mapping.