walk-commits

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow ingests the repository’s commit history and diffs via git log/git diff/git show (e.g., commit subjects/bodies and hunk text) into the LLM context, and this content is outsider-authored whenever you are walking a branch “you did not write,” which is explicitly an expected use case.