github-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill is a set of GitHub CLI search commands (e.g., gh search repos/code/issues/prs and gh api search/repositories) that fetches repository/code/issue text from GitHub at runtime, which is outsider-authored content, and that fetched text can be ingested into the agent’s LLM context via the command results.