issue-writing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads read-only tracker content, including existing discussions and issue template and example inspection, and a GitHub-style issue reading path is classed as medium. Outsiders can post to such trackers without the agent selecting an item, though the skill never names a specific service URL.