github-pr-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Section 5 (“Auto-Fixing CI Failures”), the workflow retrieves and reads outsider-authored CI failure logs from the GitHub Actions endpoints (actions/runs/$RUN_ID/logs) and then prints/extracts the downloaded log text for LLM reasoning.