ooad-build

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads and interacts with GitHub issues and comments via gh CLI instructions and templates, exposing the agent to untrusted external issue submissions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The PlantUML template fetches a remote diagram library from raw.githubusercontent.com during diagram generation, creating an external runtime dependency on an unofficial/unverified repository source with a high tier.