retro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill runs git log/git shortlog against origin/<default> and parses commit subjects, author names, and PR/MR numbers from commit messages, which are outsider-authored text from other contributors’ commits (indirectly injected into the LLM context via the git command outputs).