github-actions-inspection

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow inspection path uses gh run view <run-id> --log-failed / gh run download <run-id> to ingest GitHub Actions job log text, which is outsider-authored content from other contributors’ workflow runs (e.g., code/tests/steps they wrote) and can include arbitrary free-form output that gets fed into the agent’s LLM context.