model-prepare

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads external repository content such as code, documentation, and issue threads, but does not monitor an incoming unselected feed or ingest arbitrary untrusted submissions without user action.