bm25

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The bm25 runtime path ingests free text authored by outsiders when the corpus spec points to untrusted content such as github.com/owner/repo[@ref], since resolve_corpus() downloads that tarball and CorpusIndex.build() reads and tokenizes all extracted files into the BM25 index.