GitHub Actions

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly directs the agent to access GitHub and the GitHub API (see "External Endpoints" listing https://github.com and https://api.github.com and the "Requirements" / debugging-playbook gh commands) to read workflow files, run logs, and artifacts — which are untrusted, user-generated third-party content the agent must interpret and act on.