bmad-os-gh-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's Execution Step 1 explicitly instructs using gh issue list to fetch open GitHub issues (public, user‑generated content) and the agent is required to read and triage those issues—so untrusted third‑party content from GitHub can directly influence its analysis and follow-up gh commands.