github-workflows-query

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Uses the GitHub REST API (gh api repos/{owner}/{repo}/actions/workflows?...) to ingest workflow metadata returned by GitHub for the specified repository; this is outsider-authored content (public/third-party repository data) that becomes readable JSON in the LLM context via the script’s output.