Command Development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly runs GitHub CLI commands (e.g., "gh pr view $1" in references/advanced-workflows.md and other examples) and reads PRs/remote repo data from GitHub—untrusted, user-generated third‑party content—which the agent is expected to interpret and use to drive decisions and next actions.