blume-update-docs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads and compares “Recent merge signals” by reviewing PRs merged into the default branch and extracting user-facing changes, which are outsider-authored free text (PR descriptions/commits/diffs) that can be ingested into the agent’s LLM context during runtime analysis.