zoomout

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow instructs the agent to run git fetch/git log and to “open PRs and their CI state” and “re-read” repo surfaces (README/roadmap/changelog), which at runtime ingests outsider-authored free text from public repo history/PRs/README content into the LLM context.