PR/issue comment bodies need a quoted heredoc — double quotes and <
Domain: github · Evidence E2 — Local smoke reproduced
gh-cliheredocshell-expansionsecret-leakci-automation

Summary

自动化脚本给 GitHub PR/issue 发评论时,正文常含用户可见的命令片段(`git log`、`$HOME`)和