verifying-build-provenance-with-slsa-sigstore

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow in scripts/agent.py invokes cosign verify/verify-attestation and slsa-verifier verify-artifact on caller-supplied artifact/image/provenance inputs, then parses the verified attestation payload—so outsider-authored free text is only ingested if the attacker can supply the signature/attestation files being verified.