github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow uses gh issue view, gh pr view, and gh run view which fetch and render GitHub issue/PR/run text (including bodies/logs) authored by other users, and that readable content is then ingested into the agent context via the tool output—an outsider-authored free-text source.