orcakit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). orcakit reads GitHub issue/PR state at runtime via gh pr list --head "$BRANCH" and gh issue view "$N" during the list/clean modes, and those fetched descriptions/state fields include outsider-authored free text (e.g., titles, labels, URLs, and possibly other issue/PR body fields depending on what gh returns for the selected --json keys).