git-merge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). This workflow can ingest outsider-authored free text indirectly via PR descriptions/review comments and documentation from branches that are not authored by the operating user (e.g., gh pr view <pr> --comments and reading *.md/*.mdx/*.rst/*.adr via git show <branch>:<path>), which would then be included in the LLM context through the skill’s normal “summarize/read intent” runtime outputs.