sar-cybersecurity

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow ingests source code, comments, config files, and documentation from the codebase under assessment, which can contain outsider-authored text such as malicious prompt injections, but explicitly instructs the agent to treat all code content as untrusted data.