omh-build-failure-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow fetches CI failure logs via gh run view <id> --log-failed or gh api for a specific run or job the agent selects, and those logs can carry text from PR-built code, so outsider text reaches the agent only after it picks a specific item, which the rubric scores as low.