scan-repo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly clones and inspects arbitrary public GitHub repositories (git clone to /tmp/scan-repo-{repo_name}) and queries public repo data and issues via the gh CLI (gh issue list/view, gh repo view, gh api), meaning it ingests untrusted, user-provided third‑party content from GitHub that directly informs analysis and subsequent decisions.