gitea

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill uses the tea CLI to fetch and display content from arbitrary Gitea instances (e.g., tea issues --repo owner/repo, tea issue 189, tea pr 55, tea repos list), which can contain untrusted, user-generated issues/PRs/comments that the agent would read and interpret.