github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill issues commands like "gh repo clone owner/repo", "gh gist view GIST_ID", "gh issue view 123", "gh pr view 45", and "gh api ..." which fetch and display arbitrary public GitHub repositories, gists, issues, PRs, and API responses containing untrusted user-generated content that the agent would read and process.