claude-code-commands

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly shows including command outputs such as "!gh pr diff" and "Fetch PR details with gh pr view", which pull user-generated/public GitHub PR content into the agent's input, so the agent would read untrusted third‑party content.