github-agents

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow here delegates work to GitHub Copilot cloud agents or agentic workflows where the agent “assign[s] an issue or task” and “Treat the issue as the prompt,” meaning outsider-authored issue text can be ingested directly at runtime without first selecting a specific item beyond the assignee action.