detecting-weak-cryptography

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/scan_weak_crypto.py, the skill recursively reads and ingests arbitrary UTF-8 text from the provided local path (via root.rglob("*") and file_path.read_text(...)) to run regex scans for weak crypto patterns, so outsider-authored repository files can directly influence the LLM runtime input.