github-issue-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly runs "gh issue list --state open --limit 30" and reads issue bodies to detect duplicates (Phase 2 in SKILL.md), which means it fetches and ingests untrusted, user-generated GitHub issue content and uses that content to influence whether to create or update issues.