github-pr-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow reads outsider-authored CI log text from GitHub Actions via curl .../actions/runs/$RUN_ID/logs and then cat ci-logs/*.txt, which is free-form content produced by the repo’s workflows/steps (not authored by the operating user) and becomes LLM-readable context.