github-profile-readme

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow can run scripts/gather_github.sh <owner>, which uses gh api to fetch the target account’s public profile fields (e.g., bio, website, social URLs) and current README text from repos/${OWNER}/${OWNER}/contents/README.md or repos/${OWNER}/.github/contents/profile/README.md, and that fetched free-form text is then used as LLM context to generate the new profile README.