vardoger-analyze

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider-authored free text is ingested from the user’s Copilot CLI conversation history stored under ~/.copilot/session-state/, which contains messages authored by other people (e.g., Copilot/other participants) that vardoger prepare reads and summarizes into LLM context.