hyfdev-rolldown-trust-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow involves reading PR/issue/spec/discussions and repository instructions (outsider-authored PR content), which at runtime would be ingested as readable text into the agent’s LLM context via the “Read the repository instructions, contribution rules, originating issue or specification, linked discussions, and relevant surrounding code” step.