github-actions-local

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). 运行时 LLM 上下文会包含仓库内 .github/workflows/*.yml 的自由文本（workflow/job 定义与步骤脚本等），而这些内容属于“操作用户未选择引入的外部来源”范畴。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The script's install_act routine queries https://api.github.com/repos/nektos/act/releases/latest and then downloads release assets from https://github.com/nektos/act/releases/download/{tag}/{asset_name}, extracting and running the upstream 'act' binary at runtime (remote code is fetched and executed when --install is used).