gardener-tasks

This YAML configures a GitHub mention-response agent that can read repository and provider data, execute commands, modify code, and perform numerous issue and pull-request actions. The prompt includes safeguards against following instructions in retrieved content, but unrestricted network access and broad tool permissions create meaningful abuse and prompt-injection risk. No direct malicious payload, credential theft, or suspicious endpoint is present; severity is a security concern in the agent's permission design, not evidence of malware.