cicd-pipeline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly ingests user-generated repository content—e.g., PR diffs via "git diff > pr-diff.txt", test logs via "cat test-results/*.log", and git logs/diffs used in the deployment gate—and feeds that untrusted input to headless Claude whose outputs are then used to post comments, create issues, apply labels, or block deployments, so third-party content can materially influence agent actions.