shunk031-gh-comment-attach-files

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The skill explicitly stages and uploads arbitrary local files to GitHub and returns externally hosted attachment URLs (without submitting the comment), which constitutes functionality for transferring local data off the machine and enabling secret exfiltration.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill opens a user-specified GitHub issue/PR comment page and then reads the inserted comment composer Markdown and page snapshots at runtime (via get_composer_markdown() and capture_snapshot() inside upload_files()), which can include outsider-authored free text from the issue/PR.