om-close-fixed-issues

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In step 1/2, the skill calls the tracker operations list-prs requesting body,title and then performs close-signal parsing (step 3) on that outsider-authored PR free text, without requiring prior selection beyond enumerating PRs in the configured window.