strix-ci-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Option A (self-hosted OSS CLI) reads repository contents during a PR-scoped scan after checkout/diff resolution, so outsider-authored PR text is ingested (via changed files) at runtime by the LLM-backed scanner.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The GitHub/CI workflow runs "curl -sSL https://strix.ai/install | bash" (lines 35 and 82), which fetches and executes remote code at runtime, so this external URL directly executes code and is a required install dependency.