github-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md Phase 1, the runtime uses gh issue list and gh pr list to ingest outsider-authored GitHub issue/PR text fields (including title/body) from the selected repository, without needing any special attacker-chosen “specific fetch” step beyond selecting the repo.