github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs using the gh CLI to fetch and view GitHub content (e.g., "gh pr view", "gh issue list", "gh api", "gh run view") — public, user-generated PRs/issues/comments/CI logs that the agent is expected to read and that can drive actions like summaries, comments, or merges, which meets the criteria for exposure to untrusted third‑party content and potential indirect prompt injection.