workflow-onboard

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow reads repository files (e.g., README.md, src/**, supabase/migrations/*.sql, prisma/schema.prisma) that are authored by the repo’s maintainers/other contributors, and at runtime those file contents become LLM-readable text, creating an outsider-authored free-text injection surface.