gpc-vitals-monitoring

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md and references/review-management.md explicitly instruct the agent to fetch and process Google Play user-generated reviews (via commands like "gpc reviews list" and "gpc reviews get"/export), which are untrusted public third‑party content that the agent is expected to read and act on (including replying and influencing CI/decision workflows).