simple-github-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses gh search, gh api, and other GitHub CLI commands to inspect remote repository state, search code, and manage issues or PRs, which ingests outsider-authored free text from GitHub repositories.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The optional peer reference points to a GitHub repository URL and mutable raw-content endpoint to fetch and execute instructions at runtime, which is an unverifiable remote operational dependency under common/reputable unofficial publisher provenance.