project-session-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill fetches and ingests untrusted, user-generated content from public GitHub (e.g., via gh pr view, gh issue view, and cloning https://github.com/...), meaning the agent will read PR/issue titles, bodies, and files from third-party repositories.