merge-open-prs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: the skill calls gh pr list / gh pr checks / gh pr diff to ingest PR metadata, check rollups, and diff text authored by external contributors; this free-form PR content (titles/diffs/findings) is then placed into the agent’s LLM context for review/plan generation.