dev-ship

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill directly reads and acts on GitHub issue bodies via commands like gh issue list ... --json ... body and the workflow statement "Read the issue body fully — the acceptance criteria drive the TDD cycles," which means untrusted, user-generated issue content can influence implementation and tool actions.