klh-find-bugs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow ingests the FULL git diff ... ...HEAD output (and then reads changed files line-by-line if truncated), which is outsider-authored free text when the operating user’s branch includes commits/files they did not author (e.g., PR/other contributors’ code), and that diff/file content is then fed into the agent’s LLM context for analysis.