repo-ready

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In update mode, scripts/scan-repo.mjs calls readFileSync(full, 'utf-8') for any catalog-matched files in the user’s repo (including attacker-authored file contents), then formatReport includes those findings/descriptions in the LLM’s runtime context.