github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow uses gh pr view, gh issue list/view, and gh run view to fetch PR/issue/workflow text from GitHub (outsider-authored content by other users) and then passes that readable text into the agent’s LLM context via the tool output.