core-commit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads outsider-authored free text from a user-provided GitHub PR URL (PR title/description/diff summary and the github-actions[bot] comment) and also scrapes the linked Trac ticket page for participants, meaning attackers can post poison into GitHub/Trac content that the LLM ingests at runtime.