cicd

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The required workflow described in SKILL.md is driven by a PR bot (copy-pr-bot) and a CI failure investigation procedure that uses gh pr diff/ checks to read PR code/metadata; that PR content (authored by outside contributors) is pulled into logs/text at runtime and can be ingested by the agent while investigating.