spec-implement

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly runs gh issue view {N} (Phase 4) and uses the GitHub issue body to locate specs, extract requirements and task checklists that drive branch creation, implementation steps, and PR actions, so untrusted user-generated GitHub issue content can materially influence the agent's decisions and tool use.