add-google-analytics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow reads outsider-authored free text from the operating user’s repository files (e.g., app/layout.tsx, templates, HTML, CSP findings) via scripts/inspect-project.mjs using read(file) and then feeds that extracted prose into the agent’s planning context as JSON output.