"The vulnerable Github Agentic Workflow Noma Labs discovered was configured to: * Trigger the workflow on issues.assigned events in GitHub * Read the issue Tit

"The vulnerable Github Agentic Workflow Noma Labs discovered was configured to: * Trigger the workflow on issues.assigned events in GitHub * Read the issue Title and Body * Post a comment in response using the add-comment tool * Run with read access to other repositories (public and private) in the organization " Self inflicted damage, I think. So what is their claim, that gh-aw's "Safe output gate" and "Threat detection" didn't stop the workflow?