rhdh-upgrade-helper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflows/full-report.md Step 4.5b GitHub Issues search ingests outsider-authored free text because it runs gh search issues over redhat-developer/rhdh issue titles/descriptions/URLs and then includes those summaries in the customer report.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill runtime explicitly performs a git clone of the overlay repo which is then read to drive migration findings and replacement instructions (git clone https://github.com/redhat-developer/rhdh-plugin-export-overlays.git), so the fetched repository content directly controls the agent's output.