soloscrum-tracker-github-query-state

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill runs gh issue list / gh issue view / gh api graphql against GitHub and ingests outsider-authored issue/PR text fields like title (and potentially subIssuesSummary/body-derived context) from public GitHub content authored by other users, which is then placed into the agent’s LLM context for output formatting.