gh-issues

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly loads and interprets AI session context from GitHub issue comments (see SKILL.md / README examples using gh issue view ... --json comments --jq '...contains("AI-CONTEXT")...'), which are untrusted, user-generated third-party content that can materially influence the agent's next actions.