write-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Step 4 instructs running gh pr list --state merged --limit 10 --json title, which fetches user-generated PR titles from GitHub (a third-party source) and uses them to infer the project's title style, so that untrusted external content can directly influence the agent's output.