typescript-react-smell-detector

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/scan.sh, the scanner uses rg to read and regex-match the contents of the user-supplied path (or Git worktree changed files via --changed) from the filesystem, treating it as code text to output findings, so outsider-authored file content can be ingested at runtime.