dependency-auditor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/dep_scanner.py, the runtime workflow scans and ingests user-provided project files (including package.json, lockfiles, etc.) via scan_project()→rglob()→parser(dep_file), so outsider-authored free text can be read from those files (e.g., dependency fields/metadata) when the project directory comes from an untrusted source.