oss-repository-conventions

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill runtime reads outsider-authored text from the target repository’s own files—e.g., community templates and prompts are sourced from files like .github/ISSUE_TEMPLATE/* and other repo convention files—so an outsider can submit free text by opening/modifying those files (directly or via PR) and have it ingested for scan/audit.