seamless-rebase

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: the skill runs git fetch origin and then git rebase origin/<default-branch>, which ingests commit contents from the remote repository (outsider-authored code/text from other parties’ branches) into the agent’s LLM context when it inspects conflicted files via git show/working-tree conflict markers.