wk-pr-break

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s Stage 1 runtime workflow fetches outsider-authored free text from GitHub—PR description, inline review comments, review summary bodies, and PR conversation comments—via gh api .../pulls/.../comments, .../reviews, and .../issues/.../comments, as well as gh pr view --json title,body and gh pr diff.