status

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and reads GitHub Issues using the "gh issue list" commands in the "Data Collection -> 2. GitHub Issues" section, which are user-generated, public third-party content that the agent uses to form the dashboard and "Suggested Next" actions, so those issue contents could indirectly inject instructions influencing behavior.