github-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly fetches and acts on user-generated, public GitHub content (e.g., via gh pr view/gh pr diff, gh issue list, gh pr checks, gh run view and gh workflow list) as part of its required workflows, so untrusted PRs/issues/comments could contain instructions that materially influence merges, labels, workflow triggers, or other actions.