merge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill operates on a Remotion pull request via GitHub CLI commands like gh pr view, gh pr checks, gh run view, and gh run view --log-failed, which at runtime can cause the agent to ingest outsider-authored PR text (e.g., PR description/metadata/status check outputs) and job logs without first selecting a specific trusted item.