git-commit-push-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly reads and interprets PR bodies from GitHub as part of its required workflow (see DU-3: "Read the current PR description: gh pr view --json body --jq '.body'"), and those PR descriptions are user-generated/untrusted content that can influence how the agent composes or updates PRs.