github-commit-recovery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow can fetch commit content/diffs/patches from GitHub URLs or REST API endpoints (e.g., https://github.com/<ORG>/<REPO>/commit/<SHA>.patch or GET /repos/{owner}/{repo}/commits/{ref}), which are outsider-authored free text (public repo commit messages/diffs) that can be ingested into the agent’s LLM context.