issuekit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill workflow monitors GitHub issues and pull requests via the gh CLI across multiple modes (sync, triage, close), allowing any user with access to the repo's issue tracker or PR queue to submit free text (titles, bodies, comments) that the agent ingests at runtime.