karpathy-coder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text can be ingested when a user runs the linter tools on stdin or a plan file (e.g., assumption_linter.py reads markdown from sys.stdin), which the workflow then analyzes as plain text.