compound-learnings

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly gathers and parses user-generated content (git commit bodies and PR descriptions via git log and gh pr list) and uses that data as input to extract patterns and generate recommendations, so untrusted third-party contributors could indirectly inject instructions.