commit-push-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly streams and reads CI check logs and PR data from GitHub (see Phase 6: "gh pr checks <PR_NUMBER> --watch" and "Checks fail -> read logs, diagnose, fix") which means it ingests user-generated/untrusted third-party content from a remote service and can use that content to decide fixes and commits.