create-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md Step 1/“Gather Info”, the workflow reads outsider-influenced free text from Git commit messages via git log/git diff over remote refs (refs/remotes/origin/...), which is used to generate the PR title/body and then scanned/sanitized at Steps 3-4/4b.