flux-opencode-rp-explorer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses rp-cli commands like search, builder, select, and read (e.g., builder "understand authentication" and read src/auth/login.ts) which cause the LLM to ingest free text that can originate from the target codebase (including outsider-authored text if the repo/PR is outsider-controlled).