commit-narrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow runs git diff --staged --binary and pipes the resulting staged diff text into python3 scripts/narrate.py --diff -, so the LLM context is fed by repository content authored by other contributors (e.g., commit diffs from outside the operating user) via the staged diff.