k8s-gitops

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly reads external Git/Helm sources (e.g., repoURL in ARGOCD.md and the GitRepository in FLUX.md pointing to https://github.com/org/my-app) and exposes tools like argocd_refresh_tool and flux_sources_list_tool that fetch and interpret repository/remote content, which are untrusted third‑party sources.