uploading-files

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In upload.py step fetch it reads file contents from a user-uploaded GitHub branch via https://raw.githubusercontent.com/{owner}/{repo}/{branch}/{rel} and writes them into local ./.uploads/, meaning outsider-authored text (uploaded files) is ingested as local input at runtime.