devops-deploy-v2

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). The required runtime workflow is the GitHub Actions YAML copied from the outsider repository (.Github/Workflows/Deploy.Yml), which includes a curl call that posts free-form text to Telegram (text=Auri deployed successfully! Commit: ${{ github.sha }}), so outsider-authored prose from that workflow is ingested into the agent’s LLM context via the imported upstream workflow content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Deploy workflow includes GitHub Action steps that are fetched and executed at runtime (e.g., uses: actions/checkout@v4, actions/setup-python@v5, codecov/codecov-action@v4, aws-actions/setup-sam@v2, aws-actions/configure-aws-credentials@v4 — corresponding repos include https://github.com/actions/checkout, https://github.com/actions/setup-python, https://github.com/codecov/codecov-action, https://github.com/aws-actions/setup-sam, and https://github.com/aws-actions/configure-aws-credentials), so these are runtime external dependencies that execute remote code.