claude-md-drift-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow runs git log --since=... --name-status, which prints full commit messages from the local repository, and those messages can originate from external contributors whose changes were merged, so outsider text reaches the LLM without the agent selecting a specific item, though an outsider cannot inject it without a maintainer merging a commit.