repo-activity

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly says it "Use gh api to fetch repository data" and analyzes issues/PRs/comments from GitHub (user-generated, public content), so the agent will read and act on untrusted third-party content from GitHub.