tools-github-integration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill pulls and merges remote branches (e.g., "Fetch Latest" / git checkout main && git pull and git merge origin/<branch-name>) and then installs/runs project code (npm install, pytest, npm test) from those branches (Git/GitHub), meaning untrusted, user-contributed repository content is ingested and executed as part of the workflow.