om-verify-in-repo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md step 1–3, the workflow reads GitHub issue text via the tracker operation get-issue (fields include body and comments) and then triages based on those contents, so outsider-authored free text is ingested at runtime without selecting a specific item beyond the provided {issueId}.