workflow-failure-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Required step 4 reads the full text of failed GitHub Actions job logs, which can contain output from code and commit messages that outsiders control through fork pull requests, and the workflow reaches those logs without the agent first selecting a specific outsider-authored item.