argocd-gitops

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs using ArgoCD to create and sync apps from external Git and Helm repositories (e.g., "argocd app create ... --repo https://github.com/org/repo.git" and "--repo https://charts.example.com"), meaning the agent will fetch and interpret untrusted user-generated manifests from public repos that can materially influence sync, deployment, and rollback actions.