merge-pr-verify-close

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: the skill calls gh pr view --json ... ,body (step 1) and then parses the PR body text to derive Closes/Fixes/Resolves; PR bodies are authored by outsiders (non-operating user) and are ingested as readable free text into the agent context.