Forged adk-bot comment invoking privileged workflow trigger command
Detects GitHub issue/PR comments attributed to the adk-bot service account that contain privileged workflow-trigger strings ('@gemini-cli' or '/adk-issue-fix'). The CI authorization gate validates only the commenter's account identity, not whether the trusted bot account was manipulated via prompt injection into posting the trigger itself, so any adk-bot comment containing these strings is a candidate forged bridge into maintainer-only automation.
Microsoft Sentinel (KQL)
