git-merge

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow reads and ingests conflicted file contents (including conflict markers and both “ours/theirs” code) from the local git working tree at runtime; those “theirs” sections originate from other developers’ branches/commits (outsider-authored text) and are then included in the agent’s LLM context when presenting/prompting the user for resolution.