dotnet-change-impact

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required default-resolution workflow compares the current Git branch against an upstream default branch and then ingests the resulting git log/git diff output (commit messages and changed file contents) into the agent’s LLM context; those texts are not guaranteed to be authored by the operating user and can include outsider-authored free text from the repository history (e.g., other contributors’ commit messages or PR-authored changes).