wk-gh

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). wk-gh activates on any gh command and reads GitHub notification/PR/issue/status data at runtime via gh api/gh search (e.g., gh api notifications ... | jq select(...)), which necessarily includes outsider-authored free text such as comment bodies and notification descriptions for the selected repos/users.