clerk-swift

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow reads Clerk's first-party docs, CLI output, and the installed clerk-ios package source, all vendor-authored, but its fallback step ("example apps (local or GitHub) when behavior is unclear") makes the agent fetch arbitrary GitHub example repos that outsiders can author, so the agent must actively select that content.