project-ci-failure-signatures

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow is purely about reading GitHub Actions logs via gh run view ... --log-failed (public/outsider-authored CI log text from other contributors’ PR runs) and then using that text to generate a verdict, so outsider free-form log content can be ingested into the agent’s LLM context.