ci-security-scanning-with-strix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In Option A (“Self-hosted OSS CLI in your runner”), the Strix CLI is run against the repository’s PR checkout (actions/checkout@v4) and diff-scope resolution, so outsider-authored PR text/files are ingested at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly runs remote shell code via "curl -sSL https://strix.ai/install | bash" (https://strix.ai/install), which downloads and executes external code at runtime and is a required installation step for the CLI.