code-reproduction

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow, survey.py reads outsider-authored repository text from a user-supplied local checkout (e.g., Repo.read() and subsequent repo.grep() over files like README.md, SKILL.md, scripts, and manifests), then scripts/gate.py and render_markdown() include that text in the report.