github-repo-health-weapon

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for CI density audits reads the repository’s outsider-authored workflow files from .github/workflows/*.yml (i.e., attacker-controlled GitHub Action YAML in the target repo) via ls/grep -A 10 '^on:'/job-name greps, so arbitrary free text from the repo is ingested into the LLM’s context during report generation.