github-initiative-pulse

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow (SKILL.md and modules/status-digest.md) explicitly requires syncing/pulling tracker JSON from GitHub Projects and using GitHub search queries to read issues/PRs (user-generated third-party content) which directly influences status generation and follow-up actions, so untrusted content could alter agent behavior.