github-multi-repo-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime flow, the skill uses GitHub Search/Projects APIs to read issue/PR titles, fields, and other free-text originating from third-party authors in repositories/Projects items (e.g., cross-repo-search.md and project-boards.md), without requiring the user to select a specific outsider-authored item first.