AI agents in CI that outsiders can steer
Why it matters
An agent triggered by any issue or comment, with write tools and secrets, does what a stranger’s text tells it to — prompt injection with repository access.
How to fix it
Does your repository pass this check?
Free for public GitHub repositories, no account needed. 50+ DevOps and security checks in about ten seconds.