repo-manager-reference

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md shows the helper calling GitHub APIs (e.g., gh-manager prs get/prs comments, issues comments, discussions list, files get) which ingest user-generated, public GitHub content (PRs, issues, comments, files) that the agent is expected to read and that could materially influence subsequent actions.