eval-author-discover

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads repository configuration files, task definitions, and instruction files (such as tasks/lookup-stock/instruction.md) during repository exploration and task discovery, which are untrusted user-authored inputs.