secrets-gitleaks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow runs Gitleaks over the repository contents (e.g., gitleaks detect --source /repo in the GitHub Actions template), and those scanned files/commit history may include outsider-authored free text (e.g., code/PR content from other contributors) that becomes readable prose in the LLM context via generated reports/comments.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly fetches and runs third‑party code during runtime—e.g., the pre-commit hook repo "https://github.com/gitleaks/gitleaks" in assets/precommit-config.yaml, the GitHub Action "gitleaks/gitleaks-action@v2", and the Docker image "zricethezav/gitleaks:latest" in the workflow—so external content is retrieved and executed as required dependencies.