typescript-migration

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). The required runtime workflow runs read-only shell scripts that grep and print user project files (e.g., .ts/.d.ts contents) into the script’s stdout (free text), which can include outsider-authored code/comments and thus be fed into the agent’s LLM context via the tool output; specifically scripts/audit-ts7-breakers.sh reads and echoes matched source snippets from files under the scanned project root.