push-gate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). Yes—scripts/preflight.sh calls scripts/scan-secrets.sh, which runs git diff "$DIFF_RANGE" -- . and then feeds the resulting added-line text ($ADDED_FILE) through rg and prints matches into the LLM-visible output; that diff content originates from the repository being pushed (i.e., potentially outsider-authored code/text).