ctags-lookup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime path runs rg ... "$TAGS_FILE" and pipes the matched lines (from an outsider-provided tags file) into jq -nMRf parse-ctags.jq, so any free-text ctags lines authored by outsiders can be ingested into the LLM context via the tool’s JSON output.