github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow only documents/uses the gh CLI to list/view user-specified GitHub items (PRs/issues/runs) and includes their free-text bodies/titles via commands like gh pr view --json ... body and gh issue list --json ... title, meaning outsider-authored GitHub issue/PR content can be ingested when an item is selected.