lsp-cross-repo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow uses mcp__lsp__get_cross_repo_references/find_references across multiple consumer repo roots, so the LSP will ingest and return free-text source context from OUTSIDER-authored codebases (i.e., files in consumer repositories not authored by the operating user).