security-tech-stack-check

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow actively searches the web for vendor advisories and patch notes and fetches NVD, CISA KEV, and OSV records, so outsider-authored text is read only after the agent selects those sources, which makes this low rather than medium.