infisical-secret-scanning

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow relies on the infisical scan CLI/data-source setup to ingest repository file contents (including history and push-triggered changes) authored by third parties, which can be influenced by outsiders via their commits without the agent first selecting a specific item.