article

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill ingests outsider-authored free text at runtime in the repo angle Phase 1 Research by calling GitHub APIs that return README contents and by reading releases bodies, commit messages, issue/PR titles, and release text from the watched repo, all of which can include attacker-supplied text.