pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md) tells the agent to "Analyze all commits and diffs" using git/gh (git log, git diff, gh pr create) so it will ingest and interpret user-generated commit messages and diffs from the repository/remote (e.g., GitHub) — untrusted third‑party content that can influence PR creation and subsequent actions.