git-workflow-planner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Git Workflow Planner skill takes outsider-authored free text from the user’s prompt at runtime (e.g., the “prompt” fields like “We are redesigning…” in evals) and generates workflow guidance accordingly, so it directly ingests arbitrary user text without selecting a specific trusted item.