gh-issue-autodev

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches and ingests user-generated GitHub issue content via the required workflow step "gh issue view <issue_number> --json ..." and then reads and acts on the issue body/acceptance criteria to drive classification, decomposition, and implementation, exposing the agent to untrusted third-party content (GitHub issues).