gh-fix-ci

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's workflow and bundled script (scripts/inspect_pr_checks.py) explicitly fetch and ingest GitHub Actions run and job logs via gh run view --log and gh api "/repos/.../actions/jobs/<job_id>/logs" (as documented in SKILL.md and the script), and those CI logs are untrusted, user-generated content that the agent reads and uses to create and implement fix plans.