dsh-plugin-development

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow instructs the agent to clone and read the official GitHub repository (deepseek-ai/deepseek-harness) as an evidence source, which exposes the agent to outsider-authored pull requests, issues, and commit messages.