stacked-prs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads external GitHub pull request metadata, comments, and bodies via gh pr list and gh api calls, which can contain outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs installing the github/gh-stack extension from GitHub via gh extension install github/gh-stack, which constitutes an unverifiable runtime external dependency from an unofficial community/third-party source carrying medium provenance risk.