mcr-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow uses mcr_pull_and_extract(image=...) which fetches and extracts binaries from a public Microsoft Container Registry image at runtime; the extracted assembly contents are outsider-authored artifacts and become LLM-readable text during subsequent dotnet_scan_binaries/listing steps.