github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill uses the GitHub CLI (e.g., gh api repos/owner/repo/pulls/55, gh issue list ... --json, gh pr), which fetches PRs, issues, comments, and logs from GitHub repositories—user-generated, potentially public third-party content that the agent would read and interpret.