cs-build-audit-codebase

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow ingests the user’s repository contents (including all free text in files) via bash scripts/check-repo.sh and subsequent “run the app / drive the main journeys” steps, so outsider-authored text can be read at runtime through the user-provided codebase.