create-github-issue-feature-from-specification

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow step 2 ("Check existing issues using search_issues" in SKILL.md) instructs the agent to read GitHub issues — public, user-generated third-party content — and use that content to decide whether to create or update issues, which could allow indirect prompt injection.