github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow is the GitHub worker calling the GitHub CLI (gh) to interact with PRs/issues/etc, where outputs include “stderr”/“stdout” as data; since gh operates on outsider-authored repo content (e.g., PRs/issues bodies, comments, check output), that free text can be ingested into the agent’s LLM context.