github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill uses the gh CLI (e.g., gh pr, gh issue, gh run, and gh api) to fetch PRs, issues, workflow run logs, and JSON fields from GitHub repositories—sources that can contain untrusted, user-generated content from the public web which the agent will read and interpret.