expo-ios-hig-verify

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes—scripts/verify-hig.sh uses rg/grep to read outsider-authored free text from the target project’s source files (do_search over $TARGET/$r), then records matching lines (record/check) and prints them into the runtime output (and thus into any agent/LLM context that consumes the report).