github-pr-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow’s runtime LLM context can include outsider-authored free text from GitHub Actions failure logs: it downloads and cats extracted ci-logs/*.txt from actions/runs/<RUN_ID>/logs, which contain arbitrary log output written by external contributors/CI steps, and that text is then available for the agent to read and use.