pflow-changelog

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider free text can enter the LLM context via changelog-context.sh calling mdtodo current/list and git log to ingest task titles/descriptions and commit messages from the repo; those texts may include contributions authored by other people (outsiders) and are then summarized by the agent.