github-contribution-period-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The script scripts/github_contribution_report.py explicitly queries the public GitHub API (api.github.com — e.g. /search/issues and /search/commits) and ingests PR titles, commit messages, file paths and other user-generated content which it parses and uses to infer categories, rankings, and report decisions.