repository-content-changes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required write workflow reads file contents from the target repository via get_file_contents, which is user/organization-owned content, and the only outsider-reachable read is the optional code search for references before a file removal, which is an agent-initiated search of arbitrary GitHub content.