setup-matt-pocock-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow instructs the agent to read and list GitHub or GitLab issues and comments, allowing outsiders to submit free text that the agent ingests via gh issue view or glab issue view.