sync-github-repo-metadata

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to read the repository README, docs, and remote metadata via gh repo view (public GitHub content), which are untrusted, user-generated sources that the agent must interpret to propose and potentially run gh repo edit commands, so third-party content can directly influence actions.