repo-prettifier

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow reads the target GitHub repo’s README.md and other key files at runtime (e.g., via GitHub API/content fetch), so outsider-authored Markdown from the repo is ingested as free text into the agent’s LLM context for analysis.