prkit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads GitHub PR titles, bodies, and issue/PR metadata via the gh CLI and git commands (such as gh pr view, gh issue view, and commit logs), which can contain outsider-authored free text from external contributors in issues and pull requests.