github-issue-fetcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill runs gh issue list to fetch issue titles/bodies/fields from GitHub issues in the repository (user-generated, potentially public content), which the agent reads and presents—exposing it to untrusted third-party content that could contain malicious instructions.