create-production-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill fetches and interprets GitHub repository content (e.g., steps 4 and 5: "gh api repos//compare/production...<head_branch>" and "gh pr view --repo --json number,title,body,headRefName,url")—including PR titles and bodies which are user-generated—to decide magic words and construct PR bodies, so untrusted third-party content can directly influence its actions.