github-repo-signals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested via GitHub API fields like item.get("body", "") in scripts/gh_issues_scanner.py (issue/PR bodies and comments from public repos) and then truncated into body_snippet for CSV/LLM analysis; this is runtime content authored by non-operating users.