github-actions-dataops

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the SQLFluff lint workflow, outsider-authored PR file text is ingested via actions/checkout (checks out dbt/models/**, dbt/macros/**, and dbt/tests/**), then sqlfluff lint ... | tee ../sqlfluff-output.txt and actions/github-script reads and posts that lint output based on the PR contents.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill contains runtime fetches of remote artifacts that will be downloaded and executed/used during CI: the Airflow constraint file fetched at runtime via "https://raw.githubusercontent.com/apache/airflow/constraints-${AIRFLOW_VERSION}/constraints-${PYTHON_VERSION}.txt" (SKILL.md:496-499) and the Spark tarball downloaded in the Dockerfile via "https://downloads.apache.org/spark/spark-${SPARK_VERSION}/spark-${SPARK_VERSION}-bin-hadoop${HADOOP_VERSION}.tgz" (SKILL.md:691-695), both of which directly affect installed/executed code.