github-actions

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent to query external GitHub repositories for tag/commit information (e.g., "gh api repos/{owner}/{repo}/git/ref/tags/{tag}" in rules/action-pinning.md and the SKILL.md Auto-Fix step), which fetches untrusted, user-generated third-party content that the agent must read and use to decide/push workflow fixes.