github-project

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs using gh CLI and a GraphQL query against the public GitHub project at https://github.com/users/bonny/projects/4 to list and view issues and board items, meaning the agent will ingest user-generated, untrusted GitHub content as part of its workflow which could influence actions.