ooad-discover

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads local Markdown files and optionally interacts with GitHub issues (gh issue list/view), which can ingest outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). ThePlantUML template at templates/c4.puml references a remote Plant-UML C4 standard library via a raw GitHub URL, which is a common unofficial or unauthenticated external operational dependency fetching remote diagram code/macros at runtime.