github-labels-query

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In query-labels.sh, the runtime reads GitHub label objects (including description) returned by the GitHub REST API call GET repos/${OWNER}/${REPO}/labels and then passes the raw response into jq, but those are fetched from a user-selected repository rather than an arbitrary outsider-posted feed/queue at runtime.