ext-triage-java

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow for this triage extension is to apply domain knowledge to findings (e.g., build/test, Sonar, PR review comments, ArchUnit arch-constraint findings), and those findings/comments are outsider-authored free text that the agent must read to decide FIX/SUPPRESS/ACCEPT, creating an indirect prompt-injection risk.