chezmoi-sync

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). 运行时 LLM 上下文会包含脚本输出的结构化标记；该脚本在 fetch/pull/status/diff/re-add/data-diff/verify 等路径会读取并打印远程仓库内容（如 git log HEAD..origin/main、git diff、冲突文件正文 fpath.read_text()），这些文本属于“远程/外部仓库的内容”，会被 agent 作为自由文本喂入 LLM。

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)