star-lists

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads starred repositories via GitHub API (github_api.py), which ingest repository descriptions and names authored by third parties (repository owners). Since anyone can author a repository description that the agent ingests when exporting or reviewing stars, this represents an indirect prompt injection vector.