compileiq-bootstrap

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow runs scripts/check_env.sh, which executes Python code that calls PtxasSearchSpace().retrieve(); this downloads search-space artifacts from GitHub releases (outsider-authored public web content) and ingests the resulting text/metadata into the agent’s LLM context via the captured command output (RESOLVE_OUTPUT).