github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow uses the gh CLI to fetch GitHub PR/run/log data (e.g., gh run view ... --log-failed), which can include outsider-authored free text like commit messages, step logs, or issue/PR content that is then ingested into the agent’s LLM context.