repo-xray

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime path is Phase 1/2 where the agent reads the generated output/<repo>/xray.md and output/<repo>/data/xray.json (derived from the target codebase’s files), so any outsider-authored repository text (e.g., third-party code) can be ingested as readable prose into the LLM context.