babysit-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the required workflow ingests provider-generated content from GitHub via gh pr view, gh pr checks, gh pr diff, and gh run view for a specified PR (identified by a pasted URL or PR number), which includes free-text fields such as commit messages and CI log output authored by outsiders.