meta-github-pr-watch-digest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is likely ingested because the required runtime workflow uses the github skill/gh CLI to fetch PRs, CI failures, and especially PR comments authored by other users, whose body text becomes LLM-readable context during the digest.