soia-dev-github-ops

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). This skill’s runtime reads outsider-authored free text from GitHub issue/PR/review/comment bodies and log-failed output via the address-review-feedback workflow’s Step 0 (gh api on PR reviews, PR inline comments, and issue-conversation comments), which an outsider can submit through GitHub as comment/review text.