atomic-commits

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow explicitly instructs the agent to read full diffs and surrounding code from the current working tree (e.g., via git diff/git diff -- path), which will include outsider-authored free text if the working tree contains changes the operating user did not author.