github-issue-dedupe

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md workflow (Search Strategy and Candidate Inspection) explicitly instructs using gh issue list and gh issue view <number> to fetch and read public GitHub issues (user-generated content) and then decide/post comments via gh issue comment, so untrusted third-party issue text can directly influence agent actions.