data-contracts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow implied by the GitHub Actions CI checks (lint/breaking-changes/test/ci) consumes contract YAML content authored in PRs via git diff/git show on contracts/**/*.yaml and passes it to datacontract at runtime, so outsider-authored free text in those files is ingested.