triage-ci-failure

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests user-provided free text (e.g., pasted logs, a job URL, workflow name, or failing check name) and may then use it to fetch and read GitHub Actions job logs via gh run view ... --log-failed, creating an indirect prompt-injection surface from outsider-authored text.