wp-project-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The detector reads and ingests outsider-authored repository files from the runtime working directory (e.g., scanning *.php/*.js/*.json/*.html and parsing wp-includes/version.php, plugin headers, style.css, block.json/theme.json, and wp-config.php), so any text in an untrusted repo can be fed into the agent’s LLM context via the produced JSON report.