ghwf5-implement

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches Issue/PR bodies and comments via gh issue view and gh pr view, which pulls untrusted, user-generated GitHub content that the agent reads as part of its workflow and could materially influence subsequent commits/actions.