react-hook-form-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow reads and ingests outsider-authored free text from the audited project’s source files (which the operating user did not author/choose to introduce), via collect-files.sh + detect-fast.sh/detect-ast.mjs reading those files’ contents into LLM context through the generated report snippets (render-report.mjs includes f.snippet from file lines).