codebase-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow is to read the provided repository’s files (e.g., README/docs and code) and incorporate their contents as evidence into the agent’s LLM context; since those files are authored by parties other than the operating user, this is outsider-authored free text via the “deep audit of a code repository” runtime path.