javascript-refactor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The workflow reads optional review context from /tmp/<dirname>/code-review.md via cat ..., and that file is not authored by the operating user/organization, so its free-form text can be ingested into the agent’s LLM context at runtime.