split-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md workflow explicitly fetches and parses public GitHub PR data and repository files (e.g., "gh pr view", "gh pr diff" and parsing ".github/CODEOWNERS") and then uses that untrusted, user-generated content to decide and execute PR-splitting actions, so third-party content could materially influence tool use and decisions.