setup-matt-pocock-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow is “Explore” (SKILL.md:15-23), which reads repo files and may also fetch issue/PR content later; that content can include outsider-authored free text (e.g., GitHub issue/PR bodies and comments) via the “fetch the relevant ticket” path in issue-tracker-github.md (SKILL.md:15-21 → issue-tracker-github.md:34-35), creating indirect prompt-injection risk.