promote

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text can enter the LLM context via gh pr view --json title,body,url (PR title/body authored by non-operating users) and/or git diff/changelog/commit messages that reflect outsider-authored changes, which the skill then summarizes and uses as input to drafting.