git

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow for /git (e.g., Step 2 Sync: git fetch/git rebase and Step 4 Publish: git log origin/<target>..local-dev) ingests repository commit messages/contents already present in the user’s git remote/clone, but it does not describe a queue/feed/email/comment/search/browse flow where an outsider can post arbitrary free text that the agent consumes without selecting an item.