cds-migrator-transform

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow includes “Research usage (Sourcegraph + repo)” where the agent runs Sourcegraph MCP searches/fetches (e.g., sourcegraph_fetch_file) and then ingests the fetched page/file text into the agent’s context for analysis, which is outsider-authored free text from public/internal repos not authored by the operating user.