aeon-vuln-scanner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests outsider-authored free text from public GitHub repositories at runtime (e.g., opening files and reading 30–50 lines of context around scanner hits), which the agent then places into its LLM context for triage and disclosure routing.