code-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads the contents of the target project repository (e.g., source files, manifests, READMEs) during its “Discover the project” and “Read the code with intent” steps, which means outsider-authored free text can be ingested if the repository is authored/controlled by a non-trusted user.