update-golden-values

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Step 3 explicitly runs tests/test_utils/python_scripts/download_golden_values.py to pull artifacts from a GitHub Actions workflow run (GitHub workflow run ID), meaning it ingests third-party workflow artifacts from GitHub that are then read and used to overwrite golden files and drive comparisons/PR content.