om-approve-merge-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the skill reads outsider-authored PR metadata (including title, labels, and author), via tracker operation get-pr for the user-supplied PR number, and uses those values to decide whether to approve/merge and how to handle gates.