github-explorer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow instructs the agent to search for and read GitHub issues, repository readmes, and community discussions (such as V2EX, Reddit, Zhihu, and Xiaohongshu) based on project names provided by the user, which exposes the agent to outsider-authored free text via active search and fetch.