github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly uses the GitHub CLI and gh api/gh pr/gh issue/gh run/gh repo commands to fetch and view public repository data, issues, PRs, comments, logs and other user-generated content from GitHub (open third‑party sources) as part of its workflow, which the agent is expected to read and act on.