sec-writeup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow reads the user's own repository history (git log -S/git blame, step 3), and commit messages in a public repo can carry text from external contributors, but the agent must run these commands itself rather than receive outsider text pushed into a queue.