cross-repo-discovery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). This skill’s required workflow reads Azure DevOps project/repo description body text from az devops project show/az devops invoke ... projects and az devops repos list, then writes those strings into ALL_REPOS.md and uses them to decide what to present/answer about; since those descriptions are authored by outsiders (other users in the org) and can contain free text, they can flow into the agent/LLM context when the agent reads ALL_REPOS.md or otherwise incorporates the generated markdown.