retro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source SKILL reads commit metadata and message content from the local git repository’s origin/<default> history via git log (e.g., commit subjects and hashes in Step 1 commands 1/2/3/5/11), which can include outsider-authored text in commit messages from repo collaborators.