followup-issue-from-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The skill fetches outsider-authored free text from GitHub at runtime—specifically the PR comment body via gh api repos/<owner>/<repo>/issues/comments/<id> or .../pulls/comments/<id> (or lists PR conversation comments) and then uses that comment body as the source of the action in the generated issue/LLM context.