gsp-dev

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches public GitHub milestones and open issues using the gh API/CLI and reads issue bodies ("Read issue bodies to extract Related / Blocks / Depends on") to drive recommendations and next actions, exposing the agent to untrusted, user-generated third-party content from GitHub.