setup-matt-pocock-skills

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow includes “Read whatever exists” in the current repo (e.g., issue/PR bodies, comments, and other repo text via gh issue view ... --comments / glab issue view ... --comments or local .scratch/*.md), which can contain outsider-authored free text from other users’ issues/PRs/comments that the agent then ingests into the LLM context.