repository-wiki

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow /wiki ingest, /wiki query, /wiki context, /wiki check, and /wiki rebuild reads and ingests repository “sources” from paths that can be provided by the user (e.g., /wiki ingest <path...>), and those source bytes are explicitly treated as human-owned/untrusted evidence that the LLM consumes at runtime.