github-stars-monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.78). Outsider-authored free text is ingested into the agent’s LLM context via GitHub API profile fields (e.g., bio, company, blog) for newly discovered users in collect.py (fetch_user_profile), which are then used for HOT/WARM qualification and included in the alert message.