codemagic-ci-cd-onboarding

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill requires inspecting and validating repository contents from a connected Git provider (GitHub/GitLab/Bitbucket)—e.g., reading files like pubspec.yaml, package.json, and codemagic.yaml in the user's repo—which are untrusted, user-generated third-party content that the agent must interpret and which directly drive build/config decisions.