gh-actions-build-trigger

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow reads GitHub Actions workflow run and job log text via the GitHub API endpoints (/actions/runs?... and /actions/jobs/$JOB_ID/logs), where the log contents can include outsider-authored free text (e.g., commit messages, PR/issue-provided data, or build/test output).