ds-catalog

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The validator’s runtime path scripts/validate_catalog.py:read_catalog_text → parse_catalog → yaml.load(extract_frontmatter(...), Loader=UniqueKeyLoader) reads full outsider-authored Markdown/YAML frontmatter from a caller-specified catalog file, so arbitrary free text can be ingested via the selected file content.