github-project-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests and analyzes user-generated GitHub content (e.g., "gh issue view ... --json title,body,comments", automated triage "npx ruv-swarm github triage --analyze-content", and issue comment command parsing) — public/untrusted issue bodies and comments are read and interpreted by the agent as part of its workflow, enabling indirect prompt injection.