workflow-improvement

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's auto-issue-creation module (modules/auto-issue-creation.md) explicitly queries and reads GitHub issues via commands like gh issue list --search and then uses those results to decide whether to create issues (gh issue create), meaning it ingests and acts on user-generated, third-party content from the open web.