fix-pipeline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow runs gh run list and gh run view --log-failed to fetch GitHub Actions run logs for the current branch; those logs are free-form text authored by the CI system and/or repository contributors (outsider-authored content) and are ingested into the agent’s LLM context via the command output.