git-workflows

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The GitHub workflow triage skill reads GitHub Actions run data and failure logs via the gh CLI (gh run list, gh run view), exposing the agent to untrusted outsider-authored content (such as test failures, pull request comments, or build error messages from external contributors).