epic-merge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Phase 0 step 0 (and Phase 1/2/3), the skill calls gh pr view <N> --json ... and then runs git log ... --oneline over refs derived from the PRs, so PR title/head/base/commit metadata (outsider-authored by PR submitters) is ingested without selecting a specific externally-provided text item.