publish-project-to-github

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads the user-provided local project files (including external text the user includes, such as README/content) during “Audit before packaging” and “Write the README from the real project,” e.g., via running bash .../scripts/audit_public_project.sh . and scanning the project directory contents.