triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md the required workflow explicitly reads the full body/comments/labels of GitHub issues and PRs (“Read the full issue or PR …; for a PR, the diff too”) and also queries and buckets external PRs/issues, so outsider-authored free text is ingested at runtime before selection can be constrained to a specific item.