github-repo-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow uses GitHub CLI/API calls (e.g., listing workflow runs and downloading failed run logs via actions/runs/{RUN_ID}/logs), and those logs are outsider-authored text from repository contributors/workflow runs that the agent would ingest at runtime.