tk-pr-image

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads existing GitHub PR bodies and comments where outsiders can author free text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill uploads local evidence images to an existing GitHub PR body or comment via the GitHub API or CDP, updating the PR description or comment. This constitutes an indirect financial-security exposure (creating/modifying billable usage or documentation records, specifically PR documentation) under the exclusion/indirect definitions. No direct financial transactions (payments, transfers, trades) are performed.