github-actions-il

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow configuration uses GitHub Actions workflows and composite actions that process repository metadata, commit messages, branch names, and PR titles (github.event.head_commit.message, github.ref_name, github.event.pull_request.title), which can contain outsider-authored text when contributions come from forks or external pull requests.