fork-dev-branch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill runs commands like gh issue list and gh issue view to fetch GitHub issue titles and details (public, user-generated content) and requires the agent to read and interpret those issue contents to generate branch names, exposing it to untrusted third-party input.