CI/CD Validation & Merge Workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow explicitly directs fetching and interpreting GitHub-hosted, user-generated content and CI logs (e.g., "gh run view --log", "gh pr view --json ...", "gh run list", "gh pr merge ..."), so the agent would read third-party PR descriptions/logs and use that information to decide or perform actions like merging — exposing it to untrusted indirect prompt injection.