create-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s required runtime workflow uses forge binding “inspect” to read PR/MR title/body/comments/commit text/diffs from the provider for the selected --pr or current branch, and those fields are outsider-authored free text (e.g., issue/PR author content) ingested without needing the agent to preselect a specific item beyond a PR selection.