repo-map

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads outsider-authored free text from the repository’s local files via python3 scripts/repo_map.py <path>, including scanning their full contents with f.read() to emit symbols and token math—so any attacker who can submit or poison repository files that the workflow maps can get their text ingested.