ci-fails-buildkite

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md instructs fetching Buildkite logs from public URLs at runtime (public web content), which the workflow then saves as readable .log text and would plausibly be ingested into the agent’s LLM context for diagnosis—an indirect prompt-injection risk.