babysit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads PR comments and review feedback from GitHub pull requests, which can contain outsider-authored free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill describes automating pull request workflows including merging pull requests via merge.mjs. This constitutes a direct financial operation or direct asset transfer/settlement authorization workflow (merging code into production/repositories). Independent access validation is handled via repository-level permissions and configuration checks enforced by the scripts and platform.