setup-matt-pocock-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the GitHub issue-tracker workflow, outsider-authored issue/comment free text from GitHub is ingested at runtime via gh issue view <number> --comments (and for triage, the selected “incoming issue”/ticket contents include the text attackers can submit).