oss-launch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s Stage 5 mention-scrub workflow reads free text from the repository’s tracked files and commit messages by grepping the local git checkout, which an outsider can influence by submitting a repository containing crafted content.