typescript

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill runtime reads outsider-authored free text from the local project’s package.json/tsconfig*.json (e.g., inspect_typescript.py loads and parses JSONC via load_jsonc() and propagates compilerOptions/extends/include/files/exclude into its outputs), so an outsider can submit poison by committing or uploading those files into the inspected project workspace.