github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). github skill runs scripts/fetch.sh which uses gh issue list / gh pr list to ingest GitHub issue/PR titles and bodies authored by outsiders from specified repos (including competitor repos or tracker repos), so an outsider could poison via posted issues/PR text that the workflow reads.