testcontainers-guide-migrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to clone GitHub repositories (testcontainers/tc-guide-*) and ingest their AsciiDoc files, source code, and test data at runtime. Since GitHub repositories can contain outsider-authored pull requests, issues, or commits (even if these specific source repos are trusted, GitHub repository reading rules apply as medium risk per threat model guidelines), this workflow introduces an indirect prompt injection risk.