create-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to use search_open_source_repositories (Step 1, Scenario B) and list_repo_issues (Step 3) to fetch public/open-source repositories and their existing issues on Gitee—user-generated, untrusted content that the agent reads and uses to decide/refine whether and how to create an issue.