justfile-author

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow reads outsider-authored free text from the target repo at runtime—e.g., package.json scripts, Procfile lines, docker-compose.yml service definitions, and other config files—then injects that extracted text into the agent’s LLM context to decide what to generate.