devops-github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs using the gh CLI to view and manage GitHub PRs and issues (e.g., "gh pr view", "gh issue list"/"gh issue view"), which fetches untrusted, user-generated content from public GitHub repositories that the agent would read and could materially influence subsequent tool actions.