wt-cleanup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md "Close orphaned PRs" workflow step explicitly runs gh pr list --head {branch} --state open --json number and may gh pr close {number}, which ingests and acts on user-generated GitHub PR data (a public third-party source) that can directly influence cleanup/closure actions.