om-stabilize-ci

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md requires reading CI logs and PR/check metadata from the repository/tracker at runtime (e.g., “get-run-failed-logs”, “get-pr-checks”, “get-required-checks”, “comment-pr”); those are outsider-authored free text (CI log output and PR titles/bodies/comments from other actors) that can be ingested into the agent’s LLM context for diagnosis and reporting.