github-archive

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly queries the public GitHub Archive (e.g., githubarchive.day.*/month.* BigQuery tables) and ingests user-generated event payloads (issue/PR bodies, comments, commits) from arbitrary public GitHub accounts, so the agent will read untrusted third‑party content that could contain indirect prompt-injection.