jfrog-setup-package-managers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads resolver output from the session-start “Resolved URLs for this session” table / global cache JSON and from the user’s workspace file .jfrog/local/package-resolution.json (plus local manifest files to choose package managers), so outsider-authored free text can enter these monitored inputs.