implementing-secret-scanning-with-gitleaks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow runs gitleaks detect/protect --source . (and optionally --no-git) over the repository working tree/history, so any outsider-authored free text present in that repo (e.g., commits/PR content from other users) is ingested by Gitleaks and then parsed into findings that are included in the agent’s context/output.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes CI/install steps that fetch and execute remote code at runtime — e.g., downloading the gitleaks binary from https://github.com/gitleaks/gitleaks/releases/download/v8.21.2/gitleaks_8.21.2_linux_x64.tar.gz and invoking the remote GitHub Action gitleaks/gitleaks-action@v2 — which are runtime external dependencies that execute code and are required for the scans.