repo-scrub

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source: scripts/scrub_repo.py; runtime path: the agent runs scan(repo) which reads plaintext from user-supplied repositories on disk (tracked files and any .env found via rglob) and searches it with regexes, so outsider-authored free text from that repo is ingested at runtime.