wk-pr-update

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md Stage 1 uses gh pr view --json baseRefName and gh pr view --json isDraft, i.e., it ingests PR state text/fields from GitHub for runtime strategy selection, so outsider-authored PR metadata/description-associated fields could be read without selecting a specific item first.