codebase-advisor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider-authored free text from the audited repository itself (e.g., README/docs/issues/PRs authored by outsiders) can be ingested as LLM-readable “data” in Phase 1/2 recon (“Read … config/CI/doc directories” and “Audit the codebase … read it now”), and Hard Rule 6 only prevents following instructions but does not prevent such text from being placed into the LLM context.