tech-debt-tracker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests project code/files provided via local paths (e.g., scanning a codebase directory), and those file contents can include outsider-authored free text (code comments/strings), meaning the LLM would read untrusted text from the target codebase at runtime.