circleci-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to call CircleCI endpoints such as CIRCLECI_GET_JOB_ARTIFACTS and CIRCLECI_GET_PIPELINE_CONFIG to download/list user-produced artifacts and pipeline config (user-uploaded/untrusted content from CircleCI), which the agent is expected to read and could materially influence subsequent actions.