setup-matt-pocock-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's documentation (see issue-tracker-github.md and issue-tracker-gitlab.md) explicitly instructs the agent to read issue bodies and comments via gh issue view <number> --comments / glab issue view <number> --comments, which means it will ingest untrusted, user-generated content from public issue trackers and use that content to drive labeling, triage, and other agent actions.