setup-sb-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow and docs (SKILL.md and issue-tracker-github.md) explicitly instruct using the gh CLI to fetch and read GitHub issues and their comments (e.g., gh issue view <number> --comments), which are untrusted, user-generated third-party contents that downstream skills like triage and to-issues will read and act upon.