check-ci

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests outsider-authored free text indirectly by monitoring and then fetching/parsing CI job logs (e.g., via gh run view/watch and glab ci trace) for a terminal FAILED pipeline, which can contain attacker-controlled content from commits and build artifacts/log output.