pushing-commits-to-the-repo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the required runtime workflow explicitly ingests PR-associated comments at “After you push — the loop” step 2 (“Triage every comment”), which are outsider-authored free text that the agent reads before replying.